Buffer overflow in Memcached
CVE-2013-0179
The process_bin_delete function in memcached.c in memcached 1.4.4 and other versions before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service (segmentation fault) via a request to delete a key, which does not account for the lack of a null terminator in the key and triggers a buffer over-read when printing to stderr.
Vulnerability class: Buffer Overflow
Published · last modified .
CVSS v2 metric
CVSS v2 base score 1.8 (Low). Vector: AV:A/AC:H/Au:N/C:N/I:N/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.015 (73.2th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 73rd percentile — 73.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.015 · newest: 0.015 · change: 0.000
Affected products
- Memcached — versions 1.4.4, 1.4.5, 1.4.6
Weakness classification (CWE)
References
- code.google.com/p/memcached/issues/attachmentText
- www.openwall.com/lists/oss-security/2013/01/14/4 (mailing-list)
- code.google.com/p/memcached/wiki/ReleaseNotes1417
- www.openwall.com/lists/oss-security/2013/01/14/6 (mailing-list)
- www.ubuntu.com/usn/USN-2080-1 (vendor-advisory)
- code.google.com/p/memcached/issues/detail (Exploit, Patch)
- secunia.com/advisories/56183 (Vendor Advisory, third-party-advisory)
- www.securityfocus.com/bid/64978 (vdb-entry)
- bugzilla.redhat.com/show_bug.cgi