1407 matches found
BIT-DJANGO-2020-13254
An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. In cases where a memcached backend does not perform key validation, passing malformed cache keys could result in a key collision, and potential data leakage...
BIT-MEMCACHED-2023-27478
libmemcached-awesome is an open source C/C++ client library and tools for the memcached server. libmemcached could return data for a previously requested key, if that previous request timed out due to a low POLLTIMEOUT. This issue has been addressed in version 1.1.4. Users are advised to upgrade...
BIT-LIBMEMCACHED-2023-27478 Disclosure of unrelated data in libmemcached-awesome
libmemcached-awesome is an open source C/C++ client library and tools for the memcached server. libmemcached could return data for a previously requested key, if that previous request timed out due to a low POLLTIMEOUT. This issue has been addressed in version 1.1.4. Users are advised to upgrade...
CVE-2023-45289 vulnerabilities
Vulnerabilities for packages: kpt, metrics-server, prometheus-alertmanager, vexctl, cue, dataplaneapi, fuse-overlayfs-snapshotter, kwok, terraform, gh, gosu, kube-state-metrics, rqlite, kubernetes-csi-external-provisioner, smarter-device-manager, docker-cli, docker-credential-acr-env,...
Amazon Linux 2023 : memcached, memcached-devel, memcached-selinux (ALAS2023-2023-449)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-449 advisory. In Memcached before 1.6.22, a buffer overflow exists when processing multiget requests in proxy mode, if there are many spaces after the get substring. CVE-2023-46852 In Memcached before 1.6.22...
Medium: memcached
Issue Overview: In Memcached before 1.6.22, a buffer overflow exists when processing multiget requests in proxy mode, if there are many spaces after the "get" substring. CVE-2023-46852 In Memcached before 1.6.22, an off-by-one error exists when processing proxy requests in proxy mode, if \n is us...
PHPMemcachedAdmin Path Traversal Vulnerability
PHPMemcachedAdmin is a graphical standalone administration tool for memcached by Cyrille Mahieux, an individual developer. A path traversal vulnerability exists in PHPMemcachedAdmin version 1.3.0, which stems from a lack of proper validation of user-supplied input...
PHPMemcachedAdmin Cross-Site Scripting Vulnerability
PHPMemcachedAdmin is a graphical standalone administration tool for memcached by Cyrille Mahieux, an individual developer. A cross-site scripting vulnerability exists in PHPMemcachedAdmin version 1.3.0 due to improper encoding of user control entries in the "/pmcadmin/configure.php" parameter...
PT-2023-32484 · Unknown · Elijaa/Phpmemcachedadmin
Name of the Vulnerable Software and Affected Versions: elijaa/phpmemcachedadmin version 1.3.0 Description: A Path traversal vulnerability has been reported, allowing an attacker to delete files stored on the server due to lack of proper verification of user-supplied input. Recommendations: For...
The vulnerability of the memcached data caching software’s proxy_request.c file allows a hacker to execute arbitrary code.
The vulnerability of the memcached data caching software’s proxyrequest.c file is related to a single-occurrence error. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created HTTP request...
Vulnerability of the proxy_run_coroutine() function (proto_proxy.c) of the memcached data caching software, which allows a hacker to cause a service failure
The vulnerability of the proxyruncoroutine function protoproxy.c in the memcached data caching software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause service failures through a specially crafted HTTP request...
CBL Mariner 2.0 Security Update: memcached (CVE-2023-46853)
The version of memcached installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-46853 advisory. - In Memcached before 1.6.22, an off-by-one error exists when processing proxy requests in proxy mode, if \...
CVE-2023-46853 affecting package memcached for versions less than 1.6.22-1
CVE-2023-46853 affecting package memcached for versions less than 1.6.22-1. An upgraded version of the package is available that resolves this issue...
CVE-2023-46852 affecting package memcached for versions less than 1.6.22-1
CVE-2023-46852 affecting package memcached for versions less than 1.6.22-1. An upgraded version of the package is available that resolves this issue...
CVE-2022-26635 affecting package memcached for versions less than 1.6.22-1
CVE-2022-26635 affecting package memcached for versions less than 1.6.22-1. An upgraded version of the package is available that resolves this issue...
Ubuntu: Security Advisory (USN-6476-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-6476-1: Memcached vulnerabilities
It was discovered that Memcached incorrectly handled certain multiget requests in proxy mode. A remote attacker could use this issue to cause Memcached to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2023-46852 It was discovered that Memcached incorrectly handl...
USN-6476-1 memcached vulnerabilities
It was discovered that Memcached incorrectly handled certain multiget requests in proxy mode. A remote attacker could use this issue to cause Memcached to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2023-46852 It was discovered that Memcached incorrectly handl...
Ubuntu 22.04 LTS / 23.04 / 23.10 : Memcached vulnerabilities (USN-6476-1)
The remote Ubuntu 22.04 LTS / 23.04 / 23.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6476-1 advisory. It was discovered that Memcached incorrectly handled certain multiget requests in proxy mode. A remote attacker could use this issue to...
