Approved changes feed: RSS · Atom

cpe:2.3:a:facebook:mcrouter:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFacebook (c319c35a-3469-5baa-b3bd-8582d1206a92)
ProductMcrouter (64db5139-7ebb-5315-83e8-989ace5d4a48)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/facebook/mcrouter purl2cpe 2026-06-01 10:11:42.897750

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-11937 vulnerable 2026-06-03 14:39:34.051239 Details available
In Mcrouter prior to v0.41.0, a large struct input provided to the Carbon protocol reader could result in stack exhaustion and denial of service.
Published: 2019-12-04T16:00:22.000Z
Updated: 2024-08-04T23:10:29.638Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11923 vulnerable 2026-06-03 14:39:34.016322 Details available
In Mcrouter prior to v0.41.0, the deprecated ASCII parser would allocate a buffer to a user-specified length with no maximum length enforced, allowing for resource exhaustion or denial of service.
Published: 2019-12-04T16:00:21.000Z
Updated: 2024-08-04T23:10:29.637Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.