Lucene search
HistoryOct 27, 2023 - 8:15 p.m.
CVE-2023-46852
memcached
buffer overflow
proxy mode
multiget requests
cve-2023-46852
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
8.8 High
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.0%
In Memcached before 1.6.22, a buffer overflow exists when processing multiget requests in proxy mode, if there are many spaces after the “get” substring.
Affected configurations
Node
memcachedmemcachedRange<1.6.22
Related
prion
prion
Buffer overflow
2023-10-27 20:15:00
alpinelinux
alpinelinux
CVE-2023-46852
2023-10-27 20:15:09
cve
cve
CVE-2023-46852
2023-10-27 20:15:09
cbl_mariner
cbl_mariner
CVE-2023-46852 affecting package memcached for versions less than 1.6.22-1
2023-11-15 20:12:47
CVE-2023-46852 affecting package memcached for versions less than 1.6.27-1
2024-06-21 09:32:44
debiancve
debiancve
CVE-2023-46852
2023-10-27 20:15:09
osv
osv
CVE-2023-46852
2023-10-27 20:15:09
memcached vulnerabilities
2023-11-13 15:26:54
veracode
veracode
Buffer Overflows
2023-10-30 07:02:17
Buffer Overflows
2023-10-29 10:30:21
redhatcve
redhatcve
CVE-2023-46852
2023-10-30 11:28:51
cvelist
cvelist
CVE-2023-46852
2023-10-27 00:00:00
ubuntucve
ubuntucve
CVE-2023-46852
2023-10-27 00:00:00
nessus
nessus
CBL Mariner 2.0 Security Update: memcached (CVE-2023-46852)
2024-07-03 00:00:00
Ubuntu 22.04 LTS / 23.04 / 23.10 : Memcached vulnerabilities (USN-6476-1)
2023-11-13 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6476-1)
2023-11-14 00:00:00
ubuntu
ubuntu
Memcached vulnerabilities
2023-11-13 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-4.0-0509
2023-11-10 00:00:00
Critical Photon OS Security Update - PHSA-2023-5.0-0140
2023-11-09 00:00:00
Critical Photon OS Security Update - PHSA-2023-3.0-0685
2023-11-09 00:00:00
redos
redos
ROS-20240412-01
2024-04-12 00:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
8.8 High
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.0%
Related for NVD:CVE-2023-46852