memcached 1.5.16, when UNIX sockets are used, has a stack-based buffer over-read in conn_to_str in memcached.c.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade memcached | Sep 9, 2019 | Aug 30, 2019 |
| Oracle Solaris | — | Upgrade service/memcached to version 1.5.17-11.4.15.0.1.1.0 on Solaris 11.4 | Nov 20, 2019 | Aug 30, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 30, 2019 |
| Suse | — | Upgrade memcachedUpgrade memcached-devel | Apr 2, 2020 | Aug 30, 2019 |
| Ubuntu | — | Upgrade memcached | Sep 10, 2019 | Aug 30, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub