1473 matches found
CVE-2013-0179
CVE-2013-0179 affects memcached 1.4.4 and other versions before 1.4.17. When running in verbose mode, a request to delete a key can trigger a segmentation fault due to a buffer over-read caused by printing a non-terminated key to stderr. The root cause is the missing null terminator handling in p...
CVE-2013-7290
Memcached 1.4.4 and earlier (before 1.4.17) is vulnerable in verbose mode due to do_item_get() in items.c when deleting a key. The key’s missing null terminator triggers a buffer over-read when printing to stderr, causing denial of service (segmentation fault). The issue is CVE-2013-7290; a fix i...
CVE-2013-7239
memcached before 1.4.17 allows remote attackers to bypass authentication by sending an invalid request with SASL credentials, then sending another request with incorrect SASL credentials...
CVE-2013-7239
memcached before 1.4.17 allows remote attackers to bypass authentication by sending an invalid request with SASL credentials, then sending another request with incorrect SASL credentials...
CVE-2013-7290
The doitemget function in items.c in memcached 1.4.4 and other versions before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service segmentation fault via a request to delete a key, which does not account for the lack of a null terminator in the key and...
CVE-2013-7291
memcached before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service crash via a request that triggers an "unbounded key print" during logging, related to an issue that was "quickly grepped out of the source tree," a different vulnerability than CVE-2013-017...
CVE-2013-7291
memcached before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service crash via a request that triggers an "unbounded key print" during logging, related to an issue that was "quickly grepped out of the source tree," a different vulnerability than CVE-2013-017...
CVE-2013-7239
CVE-2013-7239 affects memcached before 1.4.17, enabling remote authentication bypass by sending an invalid SASL credential request and then a subsequent request with valid credentials. The vulnerability is documented across multiple advisories (e.g., Gentoo GLSA 201406-13, OpenVAS/NASL entries) a...
CVE-2013-7291
The CVE-2013-7291 issue affects memcached prior to 1.4.17, where in verbose mode the server prints keys during logging using the memcached.c path, enabling a remote attacker to trigger a denial-of-service crash via an unbounded key print. This versus CVE-2013-0179/7290 is a separate vulnerability...
CVE-2013-0179
The processbindelete function in memcached.c in memcached 1.4.4 and other versions before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service segmentation fault via a request to delete a key, which does not account for the lack of a null terminator in the ke...
CVE-2013-0179
The processbindelete function in memcached.c in memcached 1.4.4 and other versions before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service segmentation fault via a request to delete a key, which does not account for the lack of a null terminator in the ke...
USN-2080-1: Memcached vulnerabilities
Stefan Bucur discovered that Memcached incorrectly handled certain large body lengths. A remote attacker could use this issue to cause Memcached to crash, resulting in a denial of service. CVE-2011-4971 Jeremy Sowden discovered that Memcached incorrectly handled logging certain details when the -...
[SECURITY] [DSA 2832-1] memcached security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2832-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 01, 2014 http://www.debian.org/security/faq -...
memcached SASL验证状态安全绕过漏洞
Memcached是一个高性能的分布式内存对象缓存系统，用于动态Web应用以减轻数据库负载。 Memcached在处理链接的SASL验证状态时存在错误，允许远程攻击者利用漏洞绕过SASL验证。 0 memcached 1.x 厂商补丁： Memcached ----- Memcached 1.4.17已经修复该漏洞，建议用户下载更新： https://code.google.com/p/memcached/wiki/ReleaseNotes1417...
Debian DSA-2832-1 : memcached - several vulnerabilities
Multiple vulnerabilities have been found in memcached, a high-performance memory object caching system. The Common Vulnerabilities and Exposures project identifies the following issues : - CVE-2011-4971 Stefan Bucur reported that memcached could be caused to crash by sending a specially crafted...
[SECURITY] [DSA 2832-1] memcached security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2832-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 01, 2014 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2832-1] memcached security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2832-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso January 01, 2014 http://www.debian.org/security/faq -...
CVE-2013-7239
memcached before 1.4.17 allows remote attackers to bypass authentication by sending an invalid request with SASL credentials, then sending another request with incorrect SASL credentials...
Debian Security Advisory DSA 2832-1 (memcached - several vulnerabilities)
Multiple vulnerabilities have been found in memcached, a high-performance memory object caching system. The Common Vulnerabilities and Exposures project identifies the following issues: CVE-2011-4971 Stefan Bucur reported that memcached could be caused to crash by sending a specially crafted...
