PT-2018-9294 · Memcached+3 · Memcached+3

037 · Published 2018-03-04 · Updated 2024-06-15 · CVE-2018-1000115

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Memcached version 1.5.5

Description: The issue is related to an Insufficient Control of Network Message Volume in the UDP support of the memcached server, which can result in denial of service via network flood. The traffic amplification ratio is reported to be 1:50,000. This can be exploited via network connectivity to port 11211 UDP.

Recommendations: For Memcached version 1.5.5, update to version 1.5.6, which fixes the issue by disabling the UDP protocol by default.

Exploit

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

ALT-PU-2018-1347

ALT-PU-2018-2764

CVE-2018-1000115

DSA-4218-1

MGASA-2018-0165

OPENSUSE-SU-2024:11045-1

RHSA-2018:1593

RHSA-2018:1627

RHSA-2018:2331

RHSA-2018:2857

SUSE-RU-2018:1071-1

SUSE-RU-2020:2072-1

SUSE-SU-2018:0955-1

SUSE-SU-2018:1103-1

SUSE-SU-2018:1326-1

SUSE-SU-2018_0955-1

SUSE-SU-2018_1326-1

USN-3588-1

Affected Products

Alt Linux

Memcached

Suse

Ubuntu

References · 127

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/memcached/memcached_amp.rb · Exploit
• 🔥 https://exploit-db.com/exploits/44265 · Exploit
• 🔥 https://exploit-db.com/exploits/44264 · Exploit
• https://github.com/memcached/memcached/commit/dbb7a8af90054bf4ef51f5814ef7ceb17d83d974 · Patch
• https://access.redhat.com/errata/RHBA-2018:2140 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-1000115 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-1000115 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3588-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:1326-1 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-4218-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-1000115 · Security Note
• https://osv.dev/vulnerability/CVE-2018-1000115 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-RU-2018:1071-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-RU-2020:2072-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-9951 · Vendor Advisory