1473 matches found
CVE-2026-47783
In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by saslserveruserdbcheckpass...
EUVD-2026-31065
In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by saslserveruserdbcheckpass...
CVE-2026-47783
In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by saslserveruserdbcheckpass...
CVE-2026-47783
In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by saslserveruserdbcheckpass...
PT-2026-42109
Name of the Vulnerable Software and Affected Versions memcached versions prior to 1.6.42 Description Username data for SASL password database authentication contains a timing side channel. This occurs because the sasl server userdb checkpass function utilizes a loop that terminates immediately up...
PT-2026-42110
Name of the Vulnerable Software and Affected Versions memcached versions prior to 1.6.42 Description Password data for SASL password database authentication contains a timing side channel. This occurs because the sasl server userdb checkpass function utilizes memcmp, which can allow an attacker t...
Memcached 安全漏洞
Memcached is a high-performance distributed memory object caching system developed by the Memcached community in the United States. Versions of Memcached prior to 1.6.42 contained a security vulnerability. This vulnerability stemmed from the sequential side channel in the password data used durin...
Memcached 安全漏洞
Memcached is a high-performance distributed memory object caching system developed by the Memcached community in the United States. Versions of Memcached prior to 1.6.42 contained a security vulnerability. This vulnerability stemmed from a timing side channel in the SASL password database...
Linux Distros Unpatched Vulnerability : CVE-2026-47783
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username i...
Linux Distros Unpatched Vulnerability : CVE-2026-47784
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by saslserveruserdbcheckpas...
Integer Overflow or Wraparound
Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the memcached text protocol parser when handling storage commands with extremely large values. An attacker can cause the process to crash and disrupt telemetry collection by sending crafted memcached...
GHSA-43G7-CWR8-Q3JH OpenTelemetry eBPF Instrumentation: Memcached payload length overflow can crash OBI
Summary A remotely reachable integer overflow in OBI's memcached text protocol parser can crash the OBI process and cause denial of service. When parsing memcached storage commands such as set, add, replace, append, prepend, or cas, OBI accepts extremely large values and adds the payload delimite...
OpenTelemetry eBPF Instrumentation: Memcached payload length overflow can crash OBI
Summary A remotely reachable integer overflow in OBI's memcached text protocol parser can crash the OBI process and cause denial of service. When parsing memcached storage commands such as set, add, replace, append, prepend, or cas, OBI accepts extremely large values and adds the payload delimite...
CLSA-2026-1779095842 memcached: Fix of CVE-2021-37519
CVE-2021-37519: heap buffer overflow in authfileload when the auth file lacks a trailing newline; missing bounds check on fgets and missing NUL check in the user-entry parse loop allow local DoS via a crafted --auth-file...
PT-2026-41791
Name of the Vulnerable Software and Affected Versions OpenTelemetry eBPF Instrumentation versions 0.7.0 through 0.8.x Description An integer overflow exists in the memcached text protocol parser of OpenTelemetry eBPF Instrumentation OBI. When parsing memcached storage commands such as set, add,...
Unity Linux 20.1070e Security Update: mysql (UTSA-2026-017757)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017757 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Memcached. Supported versions that are affected are 8.0.25 and prior. Easily exploitable...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: tailscale, cert-manager, mongodb-kubernetes-operator, aws-flb-kinesis, newrelic-infrastructure-agent, cert-exporter, sftpgo, kubernetes-csi-node-driver-registrar, nats-server, grafana-rollout-operator, crossplane-provider-azure-storage, maru, gobuster, cilium, promxy...
GHSA-7MR4-XJXG-34G6 vulnerabilities
Vulnerabilities for packages: grafana-agent-operator, newrelic-fluent-bit-output, flux-image-reflector-controller, tailscale, secrets-store-csi-driver-provider-azure, ko, cert-manager, crossplane-provider-sql, aws-flb-kinesis, newrelic-infrastructure-agent, kine, prometheus-adapter, scorecard,...