Memcached vulnerabilities

Products

• Memcached 22

Newest

• memcached memcached mcmc Tokenizer proto_text.c try_read_command_asciiauth out-of-bounds CVE-2026-90698 Fix available 6.9 MediumSeptember 14, 2026
• memcached In memcached before 1.6.42, password data for SASL password database authentication has a timing... CVE-2026-47784 Fix available 8.1 HighMay 20, 2026
• memcached, red hat enterprise linux 10, enterprise linux 6 +4 more +6 more In memcached before 1.6.42, username data for SASL password database authentication has a timing... CVE-2026-47783 Fix available 8.1 HighMay 20, 2026
• memcached In Memcached before 1.6.22, an off-by-one error exists when processing proxy requests in proxy... CVE-2023-46853 Fix available 9.8 CriticalOctober 27, 2023
• memcached In Memcached before 1.6.22, a buffer overflow exists when processing multiget requests in proxy... CVE-2023-46852 Fix available 7.5 HighOctober 27, 2023
• memcached memcached 1.6.7 allows a Denial of Service via multi-packet uploads in UDP. CVE-2022-48571 Fix available 7.5 HighAugust 22, 2023
• memcached Memcached 1.6.0 before 1.6.3 allows remote attackers to cause a denial of service (daemon crash)... CVE-2020-22570 Fix available 7.5 HighAugust 22, 2023
• memcached Buffer Overflow vulnerability in authfile.c memcached 1.6.9 allows attackers to cause a denial of... CVE-2021-37519 Fix available 5.5 MediumFebruary 3, 2023
• memcached Memcached 1.6.x before 1.6.2 allows remote attackers to cause a denial of service (daemon crash)... CVE-2020-10931 Fix available EPSS 28.1% 7.5 HighMarch 24, 2020
• memcached memcached 1.5.16, when UNIX sockets are used, has a stack-based buffer over-read in conn_to_str... CVE-2019-15026 Fix available 7.5 HighAugust 30, 2019
• memcached, canonical ubuntu linux +1 more In memcached before 1.5.14, a NULL pointer dereference was found in the "lru mode" and "lru... CVE-2019-11596 Fix available 7.5 HighApril 29, 2019
• memcached, canonical ubuntu linux, debian linux +1 more +3 more memcached version prior to 1.4.37 contains an Integer Overflow vulnerability in items.c:item_free... CVE-2018-1000127 Fix available 7.5 HighMarch 13, 2018
• memcached, canonical ubuntu linux, debian linux +1 more +3 more Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network... CVE-2018-1000115 Public exploitFix available EPSS 88.0% 7.5 HighMarch 5, 2018
• memcached The try_read_command function in memcached.c in memcached before 1.4.39 allows remote attackers... CVE-2017-9951 Fix available 7.5 HighJuly 17, 2017
• memcached An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for... CVE-2016-8706 Fix available EPSS 45.7% 8.1 HighNovember 2, 2016
• memcached Multiple integer overflows in process_bin_update function in Memcached, which is responsible for... CVE-2016-8705 Fix available EPSS 19.9% 9.8 CriticalNovember 2, 2016
• memcached An integer overflow in the process_bin_append_prepend function in Memcached, which is responsible... CVE-2016-8704 Fix available EPSS 23.2% 9.8 CriticalNovember 2, 2016
• memcached memcached before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial... CVE-2013-7291 Fix available 1.8 LowJanuary 13, 2014
• memcached The do_item_get function in items.c in memcached 1.4.4 and other versions before 1.4.17, when... CVE-2013-7290 Fix available 1.8 LowJanuary 13, 2014
• memcached The process_bin_delete function in memcached.c in memcached 1.4.4 and other versions before 1.4... CVE-2013-0179 Fix available 1.8 LowJanuary 13, 2014
• memcached memcached before 1.4.17 allows remote attackers to bypass authentication by sending an invalid... CVE-2013-7239 Fix available 4.8 MediumJanuary 1, 2014
• memcached Multiple integer signedness errors in the (1) process_bin_sasl_auth, (2)... CVE-2011-4971 Fix available EPSS 22.3% 5.0 MediumNovember 22, 2013