CVE-2023-27478

🗓️ 07 Mar 2023 18:15:00Reported by ubuntu.comType

libmemcached-awesome update 1.1.4 fixes data return issue for timed out requests. Users should upgrade to fix. Workarounds include setting high POLL_TIMEOUT, using separate connections for data, and not re-using connections in unknown state

Reporter	Title	Published	Views	Family All 31
ALT Linux	Security fix for the ALT Linux 10 package libmemcached version 1.1.4-alt1	3 Apr 202300:00	–	altlinux
AlpineLinux	CVE-2023-27478	7 Mar 202318:15	–	alpinelinux
Tenable Nessus	Azure Linux 3.0 Security Update: libmemcached-awesome (CVE-2023-27478)	10 Feb 202500:00	–	nessus
Tenable Nessus	Fedora 36 : libmemcached-awesome (2023-7da1639d3f)	15 Mar 202300:00	–	nessus
Tenable Nessus	Fedora 37 : libmemcached-awesome (2023-c9bbaadcbf)	14 Mar 202300:00	–	nessus
Tenable Nessus	Fedora 38 : libmemcached-awesome (2023-fd848970c4)	11 Mar 202300:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: libmemcached-awesome (CVE-2023-27478)	14 Jul 202400:00	–	nessus
BDU FSTEC	The vulnerability of the memcached data caching service provided by the libmemcached-awesome library allows a hacker to gain unauthorized access to protected information.	27 Mar 202300:00	–	bdu_fstec
CBLMariner	CVE-2023-27478 affecting package libmemcached-awesome for versions less than 1.1.4-1	12 Jul 202423:45	–	cbl_mariner
CBLMariner	CVE-2023-27478 affecting package libmemcached-awesome for versions less than 1.1.4-1	17 Apr 202422:02	–	cbl_mariner

OS	OS Version	Architecture	Package	Package Version	Filename
Ubuntu	23.04	any	libmemcached	1.1.4-1	libmemcached_1.1.4-1_any.deb

Source	Link
github	www.github.com/awesomized/libmemcached/security/advisories/GHSA-wwmh-39wj-fx59
github	www.github.com/awesomized/libmemcached/releases/tag/1.1.4
cve	www.cve.org/CVERecord

26 Aug 2025 00:10Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.16.5

EPSS0.00749

SSVC