PT-2014-1873 · Memcached+1 · Memcached+1

Publicado 2014-01-13 · Atualizado 2024-06-15 · CVE-2013-7239

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions memcached versions prior to 1.4.17

Description The issue affects memcached, allowing remote attackers to bypass authentication. This can be achieved by sending an invalid request with SASL credentials, followed by another request with incorrect SASL credentials, potentially leading to a breach of confidentiality, integrity, and availability of protected information.

Recommendations For memcached versions prior to 1.4.17, update to version 1.4.17 or later to resolve the issue. As a temporary workaround, consider restricting access to memcached to minimize the risk of exploitation.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

CWE-189

Identificadores relacionados

ALT-PU-2016-2235

BDU:2015-09681

CVE-2013-7239

DSA-2832-1

MGASA-2014-0018

OPENSUSE-SU-2024:10021-1

SUSE-SU-2018:0778-1

SUSE-SU-2018:0807-1

Produtos afetados

Alt Linux

Memcached

Referências · 52

• https://code.google.com/p/memcached/wiki/ReleaseNotes1417 · Correção
• https://bugzilla.suse.com/857188 · Nota
• https://bugzilla.suse.com/1056865 · Nota
• http://securityfocus.com/bid/64559 · Nota
• https://bdu.fstec.ru/vul/2015-09681 · Nota de Segurança
• https://bugzilla.suse.com/858677 · Nota
• http://debian.org/security/2014/dsa-2832 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8704 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2013-7239 · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2018:0807-1 · Aviso do Fabricante
• https://packages.altlinux.org/ru/vuln/CVE-2013-7239 · Nota
• https://suse.com/security/cve/CVE-2013-0179 · Nota
• http://talosintelligence.com/reports/TALOS-2016-0220 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7239 · Nota de Segurança
• https://suse.com/security/cve/CVE-2016-8704 · Nota