Comprueba tu versión
memcached -hRamas de versiones afectadas
Vulnerabilidades conocidas
| CVE | Título | Versiones afectadas | CVSS | Explotada | EPSS | Publicación |
|---|---|---|---|---|---|---|
| CVE-2026-47784 | In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel... | < 1.6.42 | 8.1 | — | 2026-05-20 | |
| CVE-2026-47783 | In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel... | < 1.6.42 | 8.1 | — | 2026-05-20 | |
| CVE-2023-46852 | In Memcached before 1.6.22, a buffer overflow exists when processing multiget requests in proxy mode, if there... | < 1.6.22 | 7.5 | — | 2023-10-27 | |
| CVE-2023-46853 | In Memcached before 1.6.22, an off-by-one error exists when processing proxy requests in proxy mode, if \n is... | < 1.6.22 | 9.8 | — | 2023-10-27 | |
| CVE-2020-22570 | Memcached 1.6.0 before 1.6.3 allows remote attackers to cause a denial of service (daemon crash) via a crafted... | ≥ 1.6.0 < 1.6.3 | 7.5 | — | 2023-08-22 | |
| CVE-2022-48571 | memcached 1.6.7 allows a Denial of Service via multi-packet uploads in UDP. | = 1.6.7 | 7.5 | — | 2023-08-22 | |
| CVE-2021-37519 | Buffer Overflow vulnerability in authfile.c memcached 1.6.9 allows attackers to cause a denial of service via... | = 1.6.9 | 5.5 | — | 2023-02-03 | |
| CVE-2020-10931 | Memcached 1.6.x before 1.6.2 allows remote attackers to cause a denial of service (daemon crash) via a crafted... | ≥ 1.6.0 < 1.6.2 | 7.5 | — | 2020-03-24 | |
| CVE-2019-15026 | memcached 1.5.16, when UNIX sockets are used, has a stack-based buffer over-read in conn_to_str in memcached.c... | = 1.5.16 | 7.5 | — | 2019-08-30 | |
| CVE-2019-11596 | In memcached before 1.5.14, a NULL pointer dereference was found in the "lru mode" and "lru temp_ttl" commands... | < 1.5.14 | 7.5 | — | 2019-04-29 | |
| CVE-2018-1000127 | memcached version prior to 1.4.37 contains an Integer Overflow vulnerability in items.c:item_free() that can r... | < 1.4.37 | 7.5 | — | 2018-03-14 | |
| CVE-2018-1000115 | Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network Amplification, CWE... | = 1.5.5 | 7.5 | — | 2018-03-05 | |
| CVE-2017-9951 | The try_read_command function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a den... | ≤ 1.4.38 | 7.5 | — | 2017-07-17 | |
| CVE-2016-8704 | An integer overflow in the process_bin_append_prepend function in Memcached, which is responsible for processi... | ≤ 1.4.31 | 9.8 | — | 2017-01-07 | |
| CVE-2016-8705 | Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing mu... | ≤ 1.4.31 | 9.8 | — | 2017-01-07 | |
| CVE-2016-8706 | An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication co... | ≤ 1.4.31 | 8.1 | — | 2017-01-07 | |
| CVE-2013-0179 | The process_bin_delete function in memcached.c in memcached 1.4.4 and other versions before 1.4.17, when runni... | = 1.4.4 = 1.4.5 = 1.4.6 | 1.8 | — | 2014-01-14 | |
| CVE-2013-7239 | memcached before 1.4.17 allows remote attackers to bypass authentication by sending an invalid request with SA... | ≤ 1.4.16 = 1.4.0 = 1.4.1 | 4.8 | — | 2014-01-14 | |
| CVE-2013-7290 | The do_item_get function in items.c in memcached 1.4.4 and other versions before 1.4.17, when running in verbo... | = 1.4.4 = 1.4.5 = 1.4.6 | 1.8 | — | 2014-01-14 | |
| CVE-2013-7291 | memcached before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service (c... | ≤ 1.4.16 = 1.4.0 = 1.4.1 | 1.8 | — | 2014-01-14 | |
| CVE-2011-4971 | Multiple integer signedness errors in the (1) process_bin_sasl_auth, (2) process_bin_complete_sasl_auth, (3) p... | ≤ 1.4.5 = 1.2.7 = 1.2.8 | 5.0 | — | 2013-12-13 |
Controla estas versiones en tus propios servidores
InfraGuard recopila las versiones de software instaladas en cada servidor y señala las que tienen vulnerabilidades conocidas. Autoalojado: nada sale de tu red.
Datos: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (consulta EPSS en https://www.first.org/epss), endoflife.date. Lista de software: awesome-selfhosted (CC BY-SA 3.0).