PT-2023-1957 · Unknown+2 · Libmemcached-Awesome+2

Ondrejcech · Published 2023-03-06 · Updated 2024-03-06 · CVE-2023-27478

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions libmemcached-awesome versions prior to 1.1.4

Description The issue is related to insufficient protection of service data when handling the POLL TIMEOUT parameter, which could allow a remote attacker to gain unauthorized access to protected information. The problem occurs when libmemcached returns data for a previously requested key if the previous request timed out due to a low POLL TIMEOUT.

Recommendations For versions prior to 1.1.4, upgrade to version 1.1.4 to address the issue. As a temporary workaround, consider using a reasonably high POLL TIMEOUT setting, like the default. Use separate libmemcached connections for unrelated data to minimize the risk of exploitation. Do not re-use libmemcached connections in an unknown state to lower the probability of this bug affecting a given deployment.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

ALT-PU-2023-1526

ALT-PU-2023-1544

ALT-PU-2023-1560

AZL-25584

AZL-34932

BDU:2023-01570

BIT-LIBMEMCACHED-2023-27478

BIT-MEMCACHED-2023-27478

CVE-2023-27478

GHSA-WWMH-39WJ-FX59

Affected Products

Alt Linux

Astra Linux

Libmemcached-Awesome

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/27xxx/CVE-2023-27478.json · Exploit
• 🔥 https://github.com/php-memcached-dev/php-memcached/issues/531 · Exploit
• https://github.com/awesomized/libmemcached/security/advisories/GHSA-wwmh-39wj-fx59 · Patch
• https://github.com/awesomized/libmemcached/commit/48dcc61a · Patch
• https://osv.dev/vulnerability/BIT-memcached-2023-27478 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-27478 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-34932 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-27478 · Security Note
• https://osv.dev/vulnerability/AZL-25584 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2023-0426SE17 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-27478 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-01570 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-27478 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-libmemcached-2023-27478 · Vendor Advisory
• https://github.com/awesomized/libmemcached/releases/tag/1.1.4 · Note