PT-2023-7069 · Memcached+5 · Memcached+5
Dormando
·
Publicado
2023-10-27
·
Atualizado
2024-11-12
·
CVE-2023-46852
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
memcached versions prior to 1.6.22
Description
The issue is related to a buffer overflow in the proxy run coroutine() function in memcached, which can be exploited by a remote attacker using a specially crafted HTTP request. This can lead to a denial of service. The buffer overflow occurs when processing multiget requests in proxy mode, specifically if there are many spaces after the "get" substring.
Recommendations
For versions prior to 1.6.22, update to version 1.6.22 or later to resolve the issue.
As a temporary workaround, consider restricting access to the proxy mode in memcached to minimize the risk of exploitation.
Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Debian
Linuxmint
Red Os
Ubuntu
Memcached