Every CVESearch/Get API key

CVE-2013-7291

memcached before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial...

1.8 LowFix available

CVE-2013-7291 is a low vulnerability (CVSS 1.8) in Memcached, published January 13, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.93%, the 61st percentile. Fixed in memcached 1.4.20-1.

What does this mean?
Severity
1.8 LowCVSS 2.0, NVD
Exploit chance
0.93%EPSS, 61st percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
1.4.20-1memcached +8 more

Description

memcached before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service (crash) via a request that triggers an "unbounded key print" during logging, related to an issue that was "quickly grepped out of the source tree," a different vulnerability than CVE-2013-0179 and CVE-2013-7290.

Exploit likelihood

0.93%Down 0.2 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
memcached
Debian:12
before 1.4.20-1
1.4.20-1
memcached
Debian:13
before 1.4.20-1
1.4.20-1
memcached
Debian:14
before 1.4.20-1
1.4.20-1
memcached
Debian:7
From an advisory covering 4 CVEs
before 1.4.13-0.2+deb7u2, plus listed versions
1.4.13-0.21.4.13-0.2+deb7u1
1.4.13-0.2+deb7u2
memcached
Mageia:3
From an advisory covering 4 CVEs
before 1.4.17-1.mga3
1.4.17-1.mga3
memcached
SUSE:OpenStack Cloud 7
From an advisory covering 9 CVEs
before 1.4.39-3.3.2
1.4.39-3.3.2
memcached
SUSE:Enterprise Storage 4
From an advisory covering 9 CVEs
before 1.4.39-3.3.2
1.4.39-3.3.2
memcached
SUSE:OpenStack Cloud 6
From an advisory covering 9 CVEs
before 1.4.39-3.3.1
1.4.39-3.3.1
memcached
openSUSE:Tumbleweed
From an advisory covering 9 CVEs
before 1.4.33-1.1
1.4.33-1.1

What each source reports

NVD Score used1.8

memcached before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service (crash) via a request that triggers an "unbounded key print" during logging, related to an issue that was "quickly grepped out of the source tree," a different vulnerability than CVE-2013-0179 and CVE-2013-7290.

Record
CVE-2013-7291
CVSS 2.0
1.8 LowAV:A/AC:H/Au:N/C:N/I:N/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE ListNo score

memcached before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service (crash) via a request that triggers an "unbounded key print" during logging, related to an issue that was "quickly grepped out of the source tree," a different vulnerability than CVE-2013-0179 and CVE-2013-7290.

Record
CVE-2013-7291
Updated
2026-11-02
EUVDEUVD-2013-7068No score

memcached before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service (crash) via a request that triggers an "unbounded key print" during logging, related to an issue that was "quickly grepped out of the source tree," a different vulnerability than CVE-2013-0179 and CVE-2013-7290.

Record
EUVD-2013-7068
Updated
2026-11-03
GitHub AdvisoriesGHSA-837m-gcpw-m94wNo score

memcached before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial...

memcached before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service (crash) via a request that triggers an "unbounded key print" during logging, related to an issue that was "quickly grepped out of the source tree," a different vulnerability than CVE-2013-0179 and CVE-2013-7290.

Record
GHSA-837m-gcpw-m94w
Weakness
CWE-119
Updated
2026-11-02
OSVNo score

memcached before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service (crash) via a request that triggers an "unbounded key print" during logging, related to an issue that was "quickly grepped out of the source tree," a different vulnerability than CVE-2013-0179 and CVE-2013-7290.

Record
CVE-2013-7291
Updated
2026-11-02
OSVDEBIAN-CVE-2013-7291No score

memcached before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service (crash) via a request that triggers an "unbounded key print" during logging, related to an issue that was "quickly grepped out of the source tree," a different vulnerability than CVE-2013-0179 and CVE-2013-7290.

Record
DEBIAN-CVE-2013-7291
Updated
2026-11-02
Show 4 moreShow less
OSVMGASA-2014-0018No score

Updated memcached package fixes multiple security vulnerabilities

Updated memcached packages fix security vulnerability:

It was reported that SASL authentication could be bypassed due to a flaw related to the managment of the SASL authentication state. With a specially crafted request, a remote attacker may be able to authenticate with invalid SASL credentials (CVE-2013-7239).

Multiple issues in memcached before 1.4.17 which allow remote attackers to cause a denial of service by sending a request that causes a crash when memcached is running in verbose mode (CVE-2013-0179, CVE-2013-7290, CVE-2013-7291).

Record
MGASA-2014-0018
Updated
2026-11-02
OSVopenSUSE-SU-2024:10021-1No score

memcached-1.4.33-1.1 on GA media

These are all security issues fixed in the memcached-1.4.33-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10021-1
Updated
2026-11-02
OSVSUSE-SU-2018:0778-1No score

Security update for memcached

This update for memcached fixes the following issues:

Security issues fixed:

  • CVE-2011-4971: remote DoS (bsc#817781).
  • CVE-2013-0179: DoS when printing out keys to be deleted in verbose mode (bsc#798458).
  • CVE-2013-7239: SASL authentication allows wrong credentials to access memcache (bsc#857188).
  • CVE-2013-7290: remote DoS (segmentation fault) via a request to delete a key (bsc#858677).
  • CVE-2013-7291: remote DoS (crash) via a request that triggers 'unbounded key print' (bsc#858676).
  • CVE-2016-8704: Server append/prepend remote code execution (bsc#1007871).
  • CVE-2016-8705: Server update remote code execution (bsc#1007870).
  • CVE-2016-8706: Server ASL authentication remote code execution (bsc#1007869).
  • CVE-2017-9951: Heap-based buffer over-read in try_read_command function (incomplete fix for CVE-2016-8705) (bsc#1056865).
Record
SUSE-SU-2018:0778-1
Updated
2026-11-02
OSVSUSE-SU-2018:0807-1No score

Security update for memcached

This update for memcached fixes the following issues:

Security issues fixed:

  • CVE-2011-4971: remote DoS (bsc#817781).
  • CVE-2013-0179: DoS when printing out keys to be deleted in verbose mode (bsc#798458).
  • CVE-2013-7239: SASL authentication allows wrong credentials to access memcache (bsc#857188).
  • CVE-2013-7290: remote DoS (segmentation fault) via a request to delete a key (bsc#858677).
  • CVE-2013-7291: remote DoS (crash) via a request that triggers 'unbounded key print' (bsc#858676).
  • CVE-2016-8704: Server append/prepend remote code execution (bsc#1007871).
  • CVE-2016-8705: Server update remote code execution (bsc#1007870).
  • CVE-2016-8706: Server ASL authentication remote code execution (bsc#1007869).
  • CVE-2017-9951: Heap-based buffer over-read in try_read_command function (incomplete fix for CVE-2016-8705) (bsc#1056865).
Record
SUSE-SU-2018:0807-1
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 24 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open