PT-2022-17969 · Unknown · Php-Memcached

Eslerm · Published 2022-04-05 · Updated 2024-08-03 · CVE-2022-26635

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PHP-Memcached versions 2.2.0 and below

Description The issue is related to an improper NULL termination, which allows attackers to execute CLRF injection. This could potentially lead to security breaches. Note that there is a dispute regarding the direct impact on PHP-Memcached.

Recommendations For PHP-Memcached versions 2.2.0 and below, consider updating to a version that fixes the improper NULL termination issue to prevent CLRF injection attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

AZL-9342

CVE-2022-26635

Affected Products

Php-Memcached

References · 11

• 🔥 https://xhzeem.me/posts/Php5-memcached-Injection-Bypass/read · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-26635 · Security Note
• https://osv.dev/vulnerability/CVE-2022-26635 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-9342 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2022-26635 · Vendor Advisory
• https://github.com/php-memcached-dev/php-memcached/issues/519 · Note
• https://t.me/cvenotify/80621 · Telegram Post
• https://t.me/cvenotify/29090 · Telegram Post
• https://security.alpinelinux.org/vuln/CVE-2022-26635 · Note
• https://t.me/cibsecurity/40175 · Telegram Post
• https://t.me/cvenotify/88694 · Telegram Post