PT-2014-1873 · Memcached+1 · Memcached+1

Published 2014-01-13 · Updated 2024-06-15 · CVE-2013-7239

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions memcached versions prior to 1.4.17

Description The issue affects memcached, allowing remote attackers to bypass authentication. This can be achieved by sending an invalid request with SASL credentials, followed by another request with incorrect SASL credentials, potentially leading to a breach of confidentiality, integrity, and availability of protected information.

Recommendations For memcached versions prior to 1.4.17, update to version 1.4.17 or later to resolve the issue. As a temporary workaround, consider restricting access to memcached to minimize the risk of exploitation.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

CWE-189

Related Identifiers

ALT-PU-2016-2235

BDU:2015-09681

CVE-2013-7239

DSA-2832-1

MGASA-2014-0018

OPENSUSE-SU-2024:10021-1

SUSE-SU-2018:0778-1

SUSE-SU-2018:0807-1

Affected Products

Alt Linux

Memcached

References · 52

• https://code.google.com/p/memcached/wiki/ReleaseNotes1417 · Patch
• https://bdu.fstec.ru/vul/2015-09681 · Security Note
• http://debian.org/security/2014/dsa-2832 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8704 · Security Note
• https://osv.dev/vulnerability/CVE-2013-7239 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:0807-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7239 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2013-7239 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7291 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2018:0778-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-7239 · Security Note
• https://osv.dev/vulnerability/MGASA-2014-0018 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2014-0018.html · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10021-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-7239 · Vendor Advisory