← All advisories

High severity7.5NVD Advisory· Published Dec 4, 2019· Updated Jun 17, 2026

CVE-2019-11937

CVE-2019-11937

Description

In Mcrouter prior to v0.41.0, a large struct input provided to the Carbon protocol reader could result in stack exhaustion and denial of service.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Facebook/Mcroutercpe-rescue3 versions
0.41.0+ 2 more
- (no CPE)range: 0.41.0
- cpe:2.3:a:facebook:mcrouter:*:*:*:*:*:*:*:*range: <0.41.0
- (no CPE)range: <0.41.0

Patches

Vulnerability mechanics

References

3

github.com/facebook/mcrouter/commit/97e033b3bb0cb16b61bf49f0dc7f311a3e0edd1bnvdPatchVendor Advisory
github.com/facebook/mcrouter/releases/tag/v0.41.0-releasenvdRelease NotesVendor Advisory
www.facebook.com/security/advisories/cve-2019-11937nvdVendor Advisory

News mentions

0

No linked articles in our index yet.