PT-2010-2868 · Memcached · Memcached

Jamie Strandboge · Publicado 2010-04-12 · Atualizado 2023-02-13 · CVE-2010-1152

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions memcached versions prior to 1.4.3

Description The issue allows remote attackers to cause a denial of service, resulting in the daemon hanging or crashing. This is achieved by sending a long line that triggers excessive memory allocation.

Recommendations For versions prior to 1.4.3, update to version 1.4.3 or later to resolve the issue.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2010-1152

Produtos afetados

Memcached

Referências · 17

• 🔥 http://code.google.com/p/memcached/issues/detail?id=102 · Exploit
• 🔥 https://exploit-db.com/exploits/33850 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2010-1152 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2010-1152 · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html · Aviso do Fabricante
• http://github.com/memcached/memcached/commit/75cc83685e103bc8ba380a57468c8f04413033f9 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2010-1152 · Nota de Segurança
• http://vupen.com/english/advisories/2011/0442 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html · Aviso do Fabricante
• http://blogs.sun.com/security/entry/input_validation_vulnerability_in_memcached · Nota
• http://marc.info/?l=oss-security&m=127075341110616&w=2 · Correção
• http://marc.info/?l=oss-security&m=127075808518733&w=2 · Correção
• http://github.com/memcached/memcached/commit/d9cd01ede97f4145af9781d448c62a3318952719 · Correção
• http://securitytracker.com/id?1023839 · Nota
• http://secunia.com/advisories/39306 · Aviso do Fabricante