Lucene search

K
redosRedosROS-20240412-01
HistoryApr 12, 2024 - 12:00 a.m.

ROS-20240412-01

2024-04-1200:00:00
redos.red-soft.ru
2
memcached
data caching
vulnerabilities
buffer overflow
denial of service
remote exploitation
http request
unix
arbitrary code
authentication file

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.3%

Vulnerability of authfile.c file of memcached data caching software is related to buffer overflow in dynamic memory.
buffer overflow in dynamic memory. Exploitation of the vulnerability could allow an attacker to cause a denial of
denial of service using a specially crafted authentication file

Vulnerability in the proxy_request.c file of the memcached data caching software tool is related to a single offset error.
single offset. Exploitation of the vulnerability could allow an attacker acting remotely,
execute arbitrary code using a specially crafted HTTP request

Vulnerability in proxy_run_coroutine() function (proto_proxy.c) of data caching software tool
memcached is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could allow
an attacker acting remotely to cause a denial of service using a specially crafted
HTTP request

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64memcached<= 1.6.23-1UNKNOWN

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.3%