26 results · Feed
-
Medium 5.3
memcached mcmc Tokenizer proto_text.c try_read_command_asciiauth out-of-bounds
A security flaw has been discovered in memcached 1.6.41/1.6.42/1.6.43. This vulnerability affects the function try_read_command_asciiauth of the file proto_text.c of the component mcmc Tokenizer. The manipulation results in out-of-bounds read. It is possible …
-
High 8.1
In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because m…
-
High 8.1
In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a…
-
Unscored —
In Memcached before 1.6.22, an off-by-one error exists when processing proxy requests in proxy mode, if \n is used inst…
-
Unscored —
In Memcached before 1.6.22, a buffer overflow exists when processing multiget requests in proxy mode, if there are many…
-
Unscored —
Memcached 1.6.0 before 1.6.3 allows remote attackers to cause a denial of service (daemon crash) via a crafted meta com…
-
Unscored —
memcached 1.6.7 allows a Denial of Service via multi-packet uploads in UDP.
-
Medium 5.5
Buffer Overflow vulnerability in authfile.c memcached 1.6.9 allows attackers to cause a denial of service via crafted a…
-
Unscored —CVE-2020-10931 EPSS 28%
Memcached 1.6.x before 1.6.2 allows remote attackers to cause a denial of service (daemon crash) via a crafted binary p…
-
Unscored —
memcached 1.5.16, when UNIX sockets are used, has a stack-based buffer over-read in conn_to_str in memcached.c.
-
Unscored —
In memcached before 1.5.14, a NULL pointer dereference was found in the "lru mode" and "lru temp_ttl" commands. This ca…
-
Unscored —
memcached version prior to 1.4.37 contains an Integer Overflow vulnerability in items.c:item_free() that can result in …
-
Unscored —
Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network Amplification, CWE-406) vul…
-
Unscored —
The try_read_command function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of se…
-
Critical 9.8CVE-2016-8704 EPSS 23%
An integer overflow in the process_bin_append_prepend function in Memcached, which is responsible for processing multip…
-
High 8.1CVE-2016-8706 EPSS 46%
An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of…
-
Critical 9.8CVE-2016-8705 EPSS 20%
Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing multiple co…
-
Unscored —
The process_bin_delete function in memcached.c in memcached 1.4.4 and other versions before 1.4.17, when running in ver…
-
Unscored —
memcached before 1.4.17 allows remote attackers to bypass authentication by sending an invalid request with SASL creden…
-
Unscored —
memcached before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service (crash) via…
-
Unscored —
The do_item_get function in items.c in memcached 1.4.4 and other versions before 1.4.17, when running in verbose mode, …
-
Unscored —
Multiple integer signedness errors in the (1) process_bin_sasl_auth, (2) process_bin_complete_sasl_auth, (3) process_bi…
-
Unscored —
memcached.c in memcached before 1.4.3 allows remote attackers to cause a denial of service (daemon hang or crash) via a…
-
Unscored —
Multiple integer overflows in memcached 1.1.12 and 1.2.2 allow remote attackers to execute arbitrary code via vectors i…
-
Unscored —
The process_stat function in (1) Memcached before 1.2.8 and (2) MemcacheDB 1.2.0 discloses (a) the contents of /proc/se…
-
Unscored —
The process_stat function in Memcached 1.2.8 discloses memory-allocation statistics in response to a stats malloc comma…