PT-2010-2868 · Memcached · Memcached

Jamie Strandboge · Published 2010-04-12 · Updated 2023-02-13 · CVE-2010-1152

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions memcached versions prior to 1.4.3

Description The issue allows remote attackers to cause a denial of service, resulting in the daemon hanging or crashing. This is achieved by sending a long line that triggers excessive memory allocation.

Recommendations For versions prior to 1.4.3, update to version 1.4.3 or later to resolve the issue.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2010-1152

Affected Products

Memcached

References · 17

• 🔥 http://code.google.com/p/memcached/issues/detail?id=102 · Exploit
• 🔥 https://exploit-db.com/exploits/33850 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2010-1152 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2010-1152 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html · Vendor Advisory
• http://github.com/memcached/memcached/commit/75cc83685e103bc8ba380a57468c8f04413033f9 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2010-1152 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html · Vendor Advisory
• http://marc.info/?l=oss-security&m=127075341110616&w=2 · Patch
• http://marc.info/?l=oss-security&m=127075808518733&w=2 · Patch
• http://github.com/memcached/memcached/commit/d9cd01ede97f4145af9781d448c62a3318952719 · Patch
• http://secunia.com/advisories/39306 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-1152 · Vendor Advisory
• http://marc.info/?l=oss-security&m=127074597129559&w=2 · Patch
• http://vupen.com/english/advisories/2011/0442 · Note