In memcached before 1.5.14, a NULL pointer dereference was found in the "lru mode" and "lru temp_ttl" commands. This causes a denial of service when parsing crafted lru command messages in process_lru_command in memcached.c.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade memcached-debugsourceUpgrade memcachedUpgrade memcached-debuginfo | Apr 29, 2020 | Apr 29, 2019 |
| Debian | — | Upgrade memcached | Jul 30, 2024 | Apr 29, 2019 |
| Oracle Solaris | — | Upgrade service/memcached to version 1.5.17-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Apr 29, 2019 |
| Oracle_linux | — | Upgrade memcached | Oct 5, 2022 | Apr 10, 2019 |
| Redhat_linux | — | Upgrade memcached-debugsourceUpgrade memcachedUpgrade memcached-debuginfo | Apr 29, 2020 | Apr 29, 2019 |
| Suse | — | Upgrade memcachedUpgrade memcached-devel | Apr 2, 2020 | Apr 29, 2019 |
| Ubuntu | — | Upgrade memcached | May 4, 2019 | Apr 29, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub