Lucene search

K
ubuntucveUbuntu.comUB:CVE-2021-37519
HistoryFeb 03, 2023 - 12:00 a.m.

CVE-2021-37519

2023-02-0300:00:00
ubuntu.com
ubuntu.com
9
buffer overflow
memcached 1.6.9
cve-2021-37519
denial of service
authfile vulnerability
crafted authentication file
unix

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

19.2%

Buffer Overflow vulnerability in authfile.c memcached 1.6.9 allows
attackers to cause a denial of service via crafted authenticattion file.

Bugs

Notes

Author Note
mdeslaur This is a minor issue, an attacker would have to be able to create an auth file, and even so, it will result only in a denial of service.
OSVersionArchitecturePackageVersionFilename
ubuntu20.04noarchmemcached< anyUNKNOWN

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

19.2%