Summary
It was discovered that Memcached's SASL password database authentication
had a timing side channel when handling username and password data. A
remote attacker could possibly use this issue to obtain sensitive
information.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | memcached | 1.6.14-1ubuntu0.2 |
| Ubuntu · 24.04 LTS 24.04:LTS | memcached | 1.6.24-1ubuntu0.1 |
| Ubuntu · 25.10 | memcached | 1.6.38-1ubuntu0.1 |
| Ubuntu · 26.04 LTS 26.04:LTS | memcached | 1.6.40-1ubuntu0.1 |