Every CVESearch/Get API key

CVE-2013-0179

The process_bin_delete function in memcached.c in memcached 1.4.4 and other versions before 1.4...

1.8 LowFix available

CVE-2013-0179 is a low vulnerability (CVSS 1.8) in Memcached, published January 13, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.50%, the 74th percentile. Fixed in memcached 1.4.13-0.2.

What does this mean?
Severity
1.8 LowCVSS 2.0, NVD
Exploit chance
1.50%EPSS, 74th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
1.4.13-0.2memcached +7 more

Description

The process_bin_delete function in memcached.c in memcached 1.4.4 and other versions before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service (segmentation fault) via a request to delete a key, which does not account for the lack of a null terminator in the key and triggers a buffer over-read when printing to stderr.

Exploit likelihood

1.50%Down 0.5 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
memcached
Debian:12
before 1.4.13-0.2
1.4.13-0.2
memcached
Debian:13
before 1.4.13-0.2
1.4.13-0.2
memcached
Debian:14
before 1.4.13-0.2
1.4.13-0.2
memcached
Mageia:3
From an advisory covering 4 CVEs
before 1.4.17-1.mga3
1.4.17-1.mga3
memcached
SUSE:OpenStack Cloud 7
From an advisory covering 9 CVEs
before 1.4.39-3.3.2
1.4.39-3.3.2
memcached
SUSE:Enterprise Storage 4
From an advisory covering 9 CVEs
before 1.4.39-3.3.2
1.4.39-3.3.2
memcached
SUSE:OpenStack Cloud 6
From an advisory covering 9 CVEs
before 1.4.39-3.3.1
1.4.39-3.3.1
memcached
openSUSE:Tumbleweed
From an advisory covering 9 CVEs
before 1.4.33-1.1
1.4.33-1.1

What each source reports

NVD Score used1.8

The process_bin_delete function in memcached.c in memcached 1.4.4 and other versions before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service (segmentation fault) via a request to delete a key, which does not account for the lack of a null terminator in the key and triggers a buffer over-read when printing to stderr.

Record
CVE-2013-0179
CVSS 2.0
1.8 LowAV:A/AC:H/Au:N/C:N/I:N/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE ListNo score

The process_bin_delete function in memcached.c in memcached 1.4.4 and other versions before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service (segmentation fault) via a request to delete a key, which does not account for the lack of a null terminator in the key and triggers a buffer over-read when printing to stderr.

Record
CVE-2013-0179
Updated
2026-11-02
EUVDEUVD-2013-0217No score

The process_bin_delete function in memcached.c in memcached 1.4.4 and other versions before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service (segmentation fault) via a request to delete a key, which does not account for the lack of a null terminator in the key and triggers a buffer over-read when printing to stderr.

Record
EUVD-2013-0217
Updated
2026-11-03
GitHub AdvisoriesGHSA-w2x5-3r39-4jxqNo score

The process_bin_delete function in memcached.c in memcached 1.4.4 and other versions before 1.4...

The process_bin_delete function in memcached.c in memcached 1.4.4 and other versions before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service (segmentation fault) via a request to delete a key, which does not account for the lack of a null terminator in the key and triggers a buffer over-read when printing to stderr.

Record
GHSA-w2x5-3r39-4jxq
Weakness
CWE-119
Updated
2026-11-02
OSVNo score

The process_bin_delete function in memcached.c in memcached 1.4.4 and other versions before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service (segmentation fault) via a request to delete a key, which does not account for the lack of a null terminator in the key and triggers a buffer over-read when printing to stderr.

Record
CVE-2013-0179
Updated
2026-11-02
OSVDEBIAN-CVE-2013-0179No score

The process_bin_delete function in memcached.c in memcached 1.4.4 and other versions before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service (segmentation fault) via a request to delete a key, which does not account for the lack of a null terminator in the key and triggers a buffer over-read when printing to stderr.

Record
DEBIAN-CVE-2013-0179
Updated
2026-11-02
Show 4 moreShow less
OSVMGASA-2014-0018No score

Updated memcached package fixes multiple security vulnerabilities

Updated memcached packages fix security vulnerability:

It was reported that SASL authentication could be bypassed due to a flaw related to the managment of the SASL authentication state. With a specially crafted request, a remote attacker may be able to authenticate with invalid SASL credentials (CVE-2013-7239).

Multiple issues in memcached before 1.4.17 which allow remote attackers to cause a denial of service by sending a request that causes a crash when memcached is running in verbose mode (CVE-2013-0179, CVE-2013-7290, CVE-2013-7291).

Record
MGASA-2014-0018
Updated
2026-11-02
OSVopenSUSE-SU-2024:10021-1No score

memcached-1.4.33-1.1 on GA media

These are all security issues fixed in the memcached-1.4.33-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10021-1
Updated
2026-11-02
OSVSUSE-SU-2018:0778-1No score

Security update for memcached

This update for memcached fixes the following issues:

Security issues fixed:

  • CVE-2011-4971: remote DoS (bsc#817781).
  • CVE-2013-0179: DoS when printing out keys to be deleted in verbose mode (bsc#798458).
  • CVE-2013-7239: SASL authentication allows wrong credentials to access memcache (bsc#857188).
  • CVE-2013-7290: remote DoS (segmentation fault) via a request to delete a key (bsc#858677).
  • CVE-2013-7291: remote DoS (crash) via a request that triggers 'unbounded key print' (bsc#858676).
  • CVE-2016-8704: Server append/prepend remote code execution (bsc#1007871).
  • CVE-2016-8705: Server update remote code execution (bsc#1007870).
  • CVE-2016-8706: Server ASL authentication remote code execution (bsc#1007869).
  • CVE-2017-9951: Heap-based buffer over-read in try_read_command function (incomplete fix for CVE-2016-8705) (bsc#1056865).
Record
SUSE-SU-2018:0778-1
Updated
2026-11-02
OSVSUSE-SU-2018:0807-1No score

Security update for memcached

This update for memcached fixes the following issues:

Security issues fixed:

  • CVE-2011-4971: remote DoS (bsc#817781).
  • CVE-2013-0179: DoS when printing out keys to be deleted in verbose mode (bsc#798458).
  • CVE-2013-7239: SASL authentication allows wrong credentials to access memcache (bsc#857188).
  • CVE-2013-7290: remote DoS (segmentation fault) via a request to delete a key (bsc#858677).
  • CVE-2013-7291: remote DoS (crash) via a request that triggers 'unbounded key print' (bsc#858676).
  • CVE-2016-8704: Server append/prepend remote code execution (bsc#1007871).
  • CVE-2016-8705: Server update remote code execution (bsc#1007870).
  • CVE-2016-8706: Server ASL authentication remote code execution (bsc#1007869).
  • CVE-2017-9951: Heap-based buffer over-read in try_read_command function (incomplete fix for CVE-2016-8705) (bsc#1056865).
Record
SUSE-SU-2018:0807-1
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 30 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open