Описание
In Mcrouter prior to v0.41.0, the deprecated ASCII parser would allocate a buffer to a user-specified length with no maximum length enforced, allowing for resource exhaustion or denial of service.
Ссылки
- PatchThird Party Advisory
- Release NotesVendor Advisory
- Vendor Advisory
- PatchThird Party Advisory
- Release NotesVendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 0.41.0 (исключая)
cpe:2.3:a:facebook:mcrouter:*:*:*:*:*:*:*:*
EPSS
Процентиль: 70%
0.00642
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-770
Связанные уязвимости
github
больше 3 лет назад
In Mcrouter prior to v0.41.0, the deprecated ASCII parser would allocate a buffer to a user-specified length with no maximum length enforced, allowing for resource exhaustion or denial of service.
EPSS
Процентиль: 70%
0.00642
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-770