1407 matches found
USN-8320-1 memcached vulnerabilities
It was discovered that Memcached's SASL password database authentication had a timing side channel when handling username and password data. A remote attacker could possibly use this issue to obtain sensitive information...
CVE-2026-47783
A flaw was found in memcached. A remote attacker can exploit a timing side channel during Simple Authentication and Security Layer SASL password database authentication. This vulnerability allows an attacker to observe subtle timing differences, which could be used to enumerate valid usernames...
[SECURITY] [DLA 4601-1] memcached security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4601-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb May 26, 2026 https://wiki.debian.org/LTS - -------------------------------------------------------------------------...
Debian dla-4601 : memcached - security update
The remote Debian 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4601 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4601-1 [email protected]...
CVE-2026-47784 affecting package memcached for versions less than 1.6.27-5
CVE-2026-47784 affecting package memcached for versions less than 1.6.27-5. A patched version of the package is available...
CVE-2026-47783 affecting package memcached for versions less than 1.6.27-5
CVE-2026-47783 affecting package memcached for versions less than 1.6.27-5. A patched version of the package is available...
BIT-MEMCACHED-2026-47784
In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by saslserveruserdbcheckpass...
BIT-MEMCACHED-2026-47783
In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by saslserveruserdbcheckpass...
CVE-2026-47784
A flaw was found in memcached. This vulnerability involves a timing side channel during SASL Simple Authentication and Security Layer password database authentication. A remote attacker could potentially exploit the timing differences in the password verification process to infer sensitive passwo...
In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass.
...
In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.
...
SUSE CVE-2026-47783
In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by saslserveruserdbcheckpass...
SUSE CVE-2026-47784
In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by saslserveruserdbcheckpass...
CVE-2026-47783
In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by saslserveruserdbcheckpass...
CVE-2026-47784
In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by saslserveruserdbcheckpass...
CVE-2026-47784
In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by saslserveruserdbcheckpass...
UBUNTU-CVE-2026-47783
In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by saslserveruserdbcheckpass...
CVE-2026-47783
In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by saslserveruserdbcheckpass...
