Skip to content
OpenAdvisories
Medium USN-8792-1 1 CVE

memcached vulnerability

Published Sep 21, 2026 · Updated Sep 21, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Memcached incorrectly handled ASCII
authentication. A remote attacker could possibly use this issue to
cause Memcached to crash, resulting in a denial of service.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS memcached 1.6.14-1ubuntu0.3
Ubuntu · 24.04 LTS 24.04:LTS memcached 1.6.24-1ubuntu0.3
Ubuntu · 26.04 LTS 26.04:LTS memcached 1.6.40-1ubuntu0.3

Vulnerabilities 1

  • Medium 5.3
    CVE-2026-90698

    memcached mcmc Tokenizer proto_text.c try_read_command_asciiauth out-of-bounds

    A security flaw has been discovered in memcached 1.6.41/1.6.42/1.6.43. This vulnerability affects the function try_read_command_asciiauth of the file proto_text.c of the component mcmc Tokenizer. The manipulation results in out-of-bounds read. It is possible …

    memcached memcached Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2026-90698