{"id":"CVE-2011-4971","aliases":["DEBIAN-CVE-2011-4971","DSA-2832-1","EUVD-2011-4876","GHSA-pj3v-4mjw-vvpv","MGASA-2013-0339","SUSE-SU-2018:0778-1","SUSE-SU-2018:0807-1","openSUSE-SU-2024:10021-1"],"status":"published","title":"Multiple integer signedness errors in the (1) process_bin_sasl_auth, (2)...","description":"Multiple integer signedness errors in the (1) process_bin_sasl_auth, (2) process_bin_complete_sasl_auth, (3) process_bin_update, and (4) process_bin_append_prepend functions in Memcached 1.4.5 and earlier allow remote attackers to cause a denial of service (crash) via a large body length value in a packet.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.22317,"percentile":0.97701,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-189"],"published":"2013-11-22T18:40:36Z","modified":"2026-10-23T17:47:37Z","exploits":[{"source":"metasploit","id":"auxiliary/dos/misc/memcached","title":"Memcached Remote Denial of Service","type":"auxiliary","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/dos/misc/memcached"}],"fixes":[{"ecosystem":"Debian:12","package":"memcached","fixed_in":["1.4.13-0.3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"memcached","fixed_in":["1.4.13-0.3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"memcached","fixed_in":["1.4.13-0.3"],"sources":["osv"]},{"ecosystem":"Mageia:2","package":"memcached","fixed_in":["1.4.15-1.mga2"],"sources":["osv"]},{"ecosystem":"Mageia:3","package":"memcached","fixed_in":["1.4.15-1.mga3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.13-0.3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.13-0.3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.13-0.3"}]}]},{"source":"osv","ecosystem":"Debian:6.0","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.5-1+deb6u1"}]}],"versions":["1.4.5-1"],"bundled":2},{"source":"osv","ecosystem":"Debian:7","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.13-0.2+deb7u1"}]}],"versions":["1.4.13-0.2"],"bundled":2},{"source":"osv","ecosystem":"Mageia:2","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.15-1.mga2"}]}]},{"source":"osv","ecosystem":"Mageia:3","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.15-1.mga3"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.39-3.3.2"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.39-3.3.2"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.39-3.3.1"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.33-1.1"}]}],"bundled":9}],"products":[{"vendor":"memcached","product":"memcached"}],"references":[{"url":"http://insecurety.net/?p=872","tags":["x_refsource_MISC","x_transferred","Exploit","evidence"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:280","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"https://code.google.com/p/memcached/issues/detail?id=192","tags":["x_refsource_MISC","x_transferred","Exploit","Patch","evidence","fix"]},{"url":"http://www.ubuntu.com/usn/USN-2080-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://www.securityfocus.com/bid/59567","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"https://puppet.com/security/cve/cve-2011-4971","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.debian.org/security/2014/dsa-2832","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://secunia.com/advisories/56183","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-4971"},{"url":"https://github.com/advisories/GHSA-pj3v-4mjw-vvpv"},{"url":"https://security-tracker.debian.org/tracker/CVE-2011-4971","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2013-0339.html","tags":["advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2013/04/30/3","tags":["web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=957964","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=9928","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180778-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1007869","tags":["report"]},{"url":"https://bugzilla.suse.com/1007870","tags":["report"]},{"url":"https://bugzilla.suse.com/1007871","tags":["report"]},{"url":"https://bugzilla.suse.com/1056865","tags":["report"]},{"url":"https://bugzilla.suse.com/798458","tags":["report"]},{"url":"https://bugzilla.suse.com/817781","tags":["report"]},{"url":"https://bugzilla.suse.com/857188","tags":["report"]},{"url":"https://bugzilla.suse.com/858676","tags":["report"]},{"url":"https://bugzilla.suse.com/858677","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7239","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7290","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9951","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180807-1/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1494","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2011-4971","description":"Multiple integer signedness errors in the (1) process_bin_sasl_auth, (2) process_bin_complete_sasl_auth, (3) process_bin_update, and (4) process_bin_append_prepend functions in Memcached 1.4.5 and earlier allow remote attackers to cause a denial of service (crash) via a large body length value in a packet.","status":"published","published":"2013-12-12T18:00:00Z","modified":"2024-08-07T00:23:39.289Z","updated_at":"2026-11-02T14:35:37.671707Z"}],"euvd":[{"id":"EUVD-2011-4876","description":"Multiple integer signedness errors in the (1) process_bin_sasl_auth, (2) process_bin_complete_sasl_auth, (3) process_bin_update, and (4) process_bin_append_prepend functions in Memcached 1.4.5 and earlier allow remote attackers to cause a denial of service (crash) via a large body length value in a packet.","status":"published","published":"2013-12-12T18:00:00Z","modified":"2024-08-07T00:23:39Z","updated_at":"2026-11-03T01:39:47.649601Z"}],"ghsa":[{"id":"GHSA-pj3v-4mjw-vvpv","title":"Multiple integer signedness errors in the (1) process_bin_sasl_auth, (2)...","description":"Multiple integer signedness errors in the (1) process_bin_sasl_auth, (2) process_bin_complete_sasl_auth, (3) process_bin_update, and (4) process_bin_append_prepend functions in Memcached 1.4.5 and earlier allow remote attackers to cause a denial of service (crash) via a large body length value in a packet.","status":"published","published":"2022-05-14T03:35:51Z","modified":"2023-02-02T05:08:12Z","updated_at":"2026-11-02T14:52:41.978099Z"}],"nvd":[{"id":"CVE-2011-4971","description":"Multiple integer signedness errors in the (1) process_bin_sasl_auth, (2) process_bin_complete_sasl_auth, (3) process_bin_update, and (4) process_bin_append_prepend functions in Memcached 1.4.5 and earlier allow remote attackers to cause a denial of service (crash) via a large body length value in a packet.","status":"published","published":"2013-12-12T18:55:03.897Z","modified":"2026-06-16T23:35:44.807Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-189"],"updated_at":"2026-11-02T14:02:12.639283Z"}],"osv":[{"id":"CVE-2011-4971","description":"Multiple integer signedness errors in the (1) process_bin_sasl_auth, (2) process_bin_complete_sasl_auth, (3) process_bin_update, and (4) process_bin_append_prepend functions in Memcached 1.4.5 and earlier allow remote attackers to cause a denial of service (crash) via a large body length value in a packet.","status":"published","published":"2013-12-12T18:55:03Z","modified":"2026-04-16T06:20:01.418877716Z","updated_at":"2026-11-02T15:43:58.279353Z"},{"id":"DEBIAN-CVE-2011-4971","description":"Multiple integer signedness errors in the (1) process_bin_sasl_auth, (2) process_bin_complete_sasl_auth, (3) process_bin_update, and (4) process_bin_append_prepend functions in Memcached 1.4.5 and earlier allow remote attackers to cause a denial of service (crash) via a large body length value in a packet.","status":"published","published":"2013-12-12T18:55:03.897Z","modified":"2026-10-23T17:47:37.879840828Z","updated_at":"2026-11-02T15:45:24.92418Z"},{"id":"DSA-2832-1","title":"memcached - several","status":"published","published":"2014-01-01T00:00:00Z","modified":"2026-03-09T01:21:42.235111Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"MGASA-2013-0339","title":"Updated memcached packages fix CVE-2011-4971","description":"Updated memcached packages fix security vulnerability:\n\nMemcached is vulnerable to a denial of service as it can be made to crash when\nit receives a specially crafted packet over the network (CVE-2011-4971).\n\nThe updated packages have been upgraded to the 1.4.15 version and patched to\nresolve this flaw.\n","status":"published","published":"2013-11-22T18:40:36Z","modified":"2026-04-16T06:22:22.614809752Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"openSUSE-SU-2024:10021-1","title":"memcached-1.4.33-1.1 on GA media","description":"These are all security issues fixed in the memcached-1.4.33-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:05:40.069602Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"SUSE-SU-2018:0778-1","title":"Security update for memcached","description":"This update for memcached fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2011-4971: remote DoS (bsc#817781).\n- CVE-2013-0179: DoS when printing out keys to be deleted in  verbose mode (bsc#798458).\n- CVE-2013-7239: SASL authentication allows wrong credentials to access memcache (bsc#857188).\n- CVE-2013-7290: remote DoS (segmentation fault) via a request to delete a key (bsc#858677).\n- CVE-2013-7291: remote DoS (crash) via a request that triggers 'unbounded key print' (bsc#858676).\n- CVE-2016-8704: Server append/prepend remote code execution (bsc#1007871).\n- CVE-2016-8705: Server update remote code execution (bsc#1007870).\n- CVE-2016-8706: Server ASL authentication remote code execution (bsc#1007869).\n- CVE-2017-9951: Heap-based buffer over-read in try_read_command function (incomplete fix for CVE-2016-8705) (bsc#1056865).\n","status":"published","published":"2018-03-22T13:15:48Z","modified":"2026-02-04T04:08:13.355547Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:0807-1","title":"Security update for memcached","description":"This update for memcached fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2011-4971: remote DoS (bsc#817781).\n- CVE-2013-0179: DoS when printing out keys to be deleted in  verbose mode (bsc#798458).\n- CVE-2013-7239: SASL authentication allows wrong credentials to access memcache (bsc#857188).\n- CVE-2013-7290: remote DoS (segmentation fault) via a request to delete a key (bsc#858677).\n- CVE-2013-7291: remote DoS (crash) via a request that triggers 'unbounded key print' (bsc#858676).\n- CVE-2016-8704: Server append/prepend remote code execution (bsc#1007871).\n- CVE-2016-8705: Server update remote code execution (bsc#1007870).\n- CVE-2016-8706: Server ASL authentication remote code execution (bsc#1007869).\n- CVE-2017-9951: Heap-based buffer over-read in try_read_command function (incomplete fix for CVE-2016-8705) (bsc#1056865).\n","status":"published","published":"2018-03-26T09:47:34Z","modified":"2026-02-04T03:07:58.794706Z","updated_at":"2026-11-02T15:53:44.594517Z"}]}}