Veracode Vulnerability DatabaseVERACODE:44048Buffer Overflows
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.9 High
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.0%
memcached is vulnerable to Buffer Overflows. An attacker could exploit this vulnerability by sending a specially crafted multiget request to a vulnerable Memcached server when there are many spaces after the “get” substring for multiget requests in proxy mode. The server would then attempt to process the request, which would cause the server to crash. The attacker could then use the crash to execute arbitrary code on the server.
| CPE | Name | Operator | Version |
|---|---|---|---|
| memcached:sid | eq | 1.6.9+dfsg-1 | |
| memcached:sid | eq | 1.6.9+dfsg-1 |
Related
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.9 High
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.0%