Description
Buffer Overflow vulnerability in authfile.c memcached 1.6.9 allows attackers to cause a denial of service via crafted authenticattion file.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | memcached | 1.6.10+dfsg-1 | — |
| Debian 13 | memcached | 1.6.10+dfsg-1 | — |
| Debian 12 | memcached | 1.6.10+dfsg-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | memcached | No fix yet | — |
Advisories 4
- WID-SEC-2023-1424 Xerox FreeFlow Print Server für Solaris: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 6, 2025
- WID-SEC-2023-0285 memcached: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Sep 7, 2025
- NCSC-2025-0024 Kwetsbaarheden verholpen in Oracle MySQL NCSC-NL (Netherlands) · Jan 22, 2025
- WID-SEC-2023-1021 Oracle Communications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 29, 2023