BIT-LIBMEMCACHED-2023-27478 Disclosure of unrelated data in libmemcached-awesome

🗓️ 06 Mar 2024 10:55:12Reported by GoogleType

osv🔗 osv.dev👁 19 Views

libmemcached client may return old data due to low POLL_TIMEOUT in version 1.1.4. Users advised to upgrade and implement workarounds

Reporter	Title	Published	Views	Family All 31
ALT Linux	Security fix for the ALT Linux 10 package libmemcached version 1.1.4-alt1	3 Apr 202300:00	–	altlinux
AlpineLinux	CVE-2023-27478	7 Mar 202318:15	–	alpinelinux
Tenable Nessus	Azure Linux 3.0 Security Update: libmemcached-awesome (CVE-2023-27478)	10 Feb 202500:00	–	nessus
Tenable Nessus	Fedora 36 : libmemcached-awesome (2023-7da1639d3f)	15 Mar 202300:00	–	nessus
Tenable Nessus	Fedora 37 : libmemcached-awesome (2023-c9bbaadcbf)	14 Mar 202300:00	–	nessus
Tenable Nessus	Fedora 38 : libmemcached-awesome (2023-fd848970c4)	11 Mar 202300:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: libmemcached-awesome (CVE-2023-27478)	14 Jul 202400:00	–	nessus
BDU FSTEC	The vulnerability of the memcached data caching service provided by the libmemcached-awesome library allows a hacker to gain unauthorized access to protected information.	27 Mar 202300:00	–	bdu_fstec
CBLMariner	CVE-2023-27478 affecting package libmemcached-awesome for versions less than 1.1.4-1	12 Jul 202423:45	–	cbl_mariner
CBLMariner	CVE-2023-27478 affecting package libmemcached-awesome for versions less than 1.1.4-1	17 Apr 202422:02	–	cbl_mariner

Source	Link
github	www.github.com/awesomized/libmemcached/commit/48dcc61a
github	www.github.com/awesomized/libmemcached/releases/tag/1.1.4
github	www.github.com/awesomized/libmemcached/security/advisories/GHSA-wwmh-39wj-fx59
github	www.github.com/php-memcached-dev/php-memcached/issues/531
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-27478

15 Oct 2025 02:27Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.16.5

EPSS0.00749

SSVC