1474 matches found
CVE-2013-7290
The doitemget function in items.c in memcached 1.4.4 and other versions before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service segmentation fault via a request to delete a key, which does not account for the lack of a null terminator in the key and...
CVE-2013-0179
CVE-2013-0179 affects memcached 1.4.4 and other versions before 1.4.17. When running in verbose mode, a request to delete a key can trigger a segmentation fault due to a buffer over-read caused by printing a non-terminated key to stderr. The root cause is the missing null terminator handling in p...
CVE-2013-7290
Memcached 1.4.4 and earlier (before 1.4.17) is vulnerable in verbose mode due to do_item_get() in items.c when deleting a key. The key’s missing null terminator triggers a buffer over-read when printing to stderr, causing denial of service (segmentation fault). The issue is CVE-2013-7290; a fix i...
CVE-2013-7291
memcached before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service crash via a request that triggers an "unbounded key print" during logging, related to an issue that was "quickly grepped out of the source tree," a different vulnerability than CVE-2013-017...
CVE-2013-7239
memcached before 1.4.17 allows remote attackers to bypass authentication by sending an invalid request with SASL credentials, then sending another request with incorrect SASL credentials...
CVE-2013-7239
memcached before 1.4.17 allows remote attackers to bypass authentication by sending an invalid request with SASL credentials, then sending another request with incorrect SASL credentials...
CVE-2013-7290
The doitemget function in items.c in memcached 1.4.4 and other versions before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service segmentation fault via a request to delete a key, which does not account for the lack of a null terminator in the key and...
CVE-2013-7291
memcached before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service crash via a request that triggers an "unbounded key print" during logging, related to an issue that was "quickly grepped out of the source tree," a different vulnerability than CVE-2013-017...
CVE-2013-7239
CVE-2013-7239 affects memcached before 1.4.17, enabling remote authentication bypass by sending an invalid SASL credential request and then a subsequent request with valid credentials. The vulnerability is documented across multiple advisories (e.g., Gentoo GLSA 201406-13, OpenVAS/NASL entries) a...
CVE-2013-0179
The processbindelete function in memcached.c in memcached 1.4.4 and other versions before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service segmentation fault via a request to delete a key, which does not account for the lack of a null terminator in the ke...
CVE-2013-7291
The CVE-2013-7291 issue affects memcached prior to 1.4.17, where in verbose mode the server prints keys during logging using the memcached.c path, enabling a remote attacker to trigger a denial-of-service crash via an unbounded key print. This versus CVE-2013-0179/7290 is a separate vulnerability...
CVE-2013-0179
The processbindelete function in memcached.c in memcached 1.4.4 and other versions before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service segmentation fault via a request to delete a key, which does not account for the lack of a null terminator in the ke...
USN-2080-1: Memcached vulnerabilities
Stefan Bucur discovered that Memcached incorrectly handled certain large body lengths. A remote attacker could use this issue to cause Memcached to crash, resulting in a denial of service. CVE-2011-4971 Jeremy Sowden discovered that Memcached incorrectly handled logging certain details when the -...
[SECURITY] [DSA 2832-1] memcached security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2832-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 01, 2014 http://www.debian.org/security/faq -...
memcached SASL验证状态安全绕过漏洞
Memcached是一个高性能的分布式内存对象缓存系统，用于动态Web应用以减轻数据库负载。 Memcached在处理链接的SASL验证状态时存在错误，允许远程攻击者利用漏洞绕过SASL验证。 0 memcached 1.x 厂商补丁： Memcached ----- Memcached 1.4.17已经修复该漏洞，建议用户下载更新： https://code.google.com/p/memcached/wiki/ReleaseNotes1417...
Debian DSA-2832-1 : memcached - several vulnerabilities
Multiple vulnerabilities have been found in memcached, a high-performance memory object caching system. The Common Vulnerabilities and Exposures project identifies the following issues : - CVE-2011-4971 Stefan Bucur reported that memcached could be caused to crash by sending a specially crafted...
[SECURITY] [DSA 2832-1] memcached security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2832-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 01, 2014 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2832-1] memcached security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2832-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 01, 2014 http://www.debian.org/security/faq -...
CVE-2013-7239
memcached before 1.4.17 allows remote attackers to bypass authentication by sending an invalid request with SASL credentials, then sending another request with incorrect SASL credentials...
