Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In Mcrouter prior to v0.41.0, the deprecated ASCII parser would allocate a buffer to a user-specified length with no maximum length enforced, allowing for resource exhaustion or denial of service.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mcrouter 资源管理错误漏洞
Vulnerability Description
Mcrouter是一款memcached协议路由器。 Mcrouter v0.41.0之前版本中存在安全漏洞，该漏洞源于不建议使用的ASCII解析器在根据用户指定的长度分配缓冲区时，没有限定最大长度。攻击者可利用该漏洞耗尽资源或造成拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A