CVE-2010-1152

memcached 1.4.2 - Memory Consumption Remote Denial of Service

Severity Score

5.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

memcached.c in memcached before 1.4.3 allows remote attackers to cause a denial of service (daemon hang or crash) via a long line that triggers excessive memory allocation. NOTE: some of these details are obtained from third party information.

memcached.c en memcached anterior a v1.4.3 permite a atacantes remotos provocar una denegación de servicio (fallo o bloqueo del demonio) a través de una línea larga que dispara la asignación de memoria excesiva. NOTA: algunos de estos detalles han sido obtenidos de información de terceros.

*Credits: N/A

CVSS Scores

NISTv2 5.0

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2010-03-29 CVE Reserved
2010-04-12 CVE Published
2010-04-27 First Exploit
2024-04-14 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-20: Improper Input Validation

CAPEC

References (13)

URL	Tag	Source
http://blogs.sun.com/security/entry/input_validation_vulnerability_in_memcached	X_refsource_confirm
http://securitytracker.com/id?1023839	Vdb Entry
http://www.vupen.com/english/advisories/2011/0442	Vdb Entry

URL	Date	SRC
https://www.exploit-db.com/exploits/33850	2010-04-27
http://code.google.com/p/memcached/issues/detail?id=102	2024-08-07

URL	Date	SRC
http://github.com/memcached/memcached/commit/75cc83685e103bc8ba380a57468c8f04413033f9	2023-11-07
http://github.com/memcached/memcached/commit/d9cd01ede97f4145af9781d448c62a3318952719	2023-11-07
http://marc.info/?l=oss-security&m=127074597129559&w=2	2023-11-07
http://marc.info/?l=oss-security&m=127075341110616&w=2	2023-11-07
http://marc.info/?l=oss-security&m=127075808518733&w=2	2023-11-07

URL	Date	SRC
http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html	2023-11-07
http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html	2023-11-07
http://secunia.com/advisories/39306	2023-11-07

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Memcachedb Search vendor "Memcachedb"		Memcached Search vendor "Memcachedb" for product "Memcached"				<= 1.4.2 Search vendor "Memcachedb" for product "Memcached" and version " <= 1.4.2"		-		Affected
Memcachedb Search vendor "Memcachedb"		Memcached Search vendor "Memcachedb" for product "Memcached"				0.0.1 Search vendor "Memcachedb" for product "Memcached" and version "0.0.1"		-		Affected
Memcachedb Search vendor "Memcachedb"		Memcached Search vendor "Memcachedb" for product "Memcached"				0.0.2 Search vendor "Memcachedb" for product "Memcached" and version "0.0.2"		-		Affected
Memcachedb Search vendor "Memcachedb"		Memcached Search vendor "Memcachedb" for product "Memcached"				0.0.3 Search vendor "Memcachedb" for product "Memcached" and version "0.0.3"		-		Affected
Memcachedb Search vendor "Memcachedb"		Memcached Search vendor "Memcachedb" for product "Memcached"				0.0.4 Search vendor "Memcachedb" for product "Memcached" and version "0.0.4"		-		Affected
Memcachedb Search vendor "Memcachedb"		Memcached Search vendor "Memcachedb" for product "Memcached"				0.1.0 Search vendor "Memcachedb" for product "Memcached" and version "0.1.0"		-		Affected
Memcachedb Search vendor "Memcachedb"		Memcached Search vendor "Memcachedb" for product "Memcached"				0.1.1 Search vendor "Memcachedb" for product "Memcached" and version "0.1.1"		-		Affected
Memcachedb Search vendor "Memcachedb"		Memcached Search vendor "Memcachedb" for product "Memcached"				1.0.0 Search vendor "Memcachedb" for product "Memcached" and version "1.0.0"		beta		Affected
Memcachedb Search vendor "Memcachedb"		Memcached Search vendor "Memcachedb" for product "Memcached"				1.0.1 Search vendor "Memcachedb" for product "Memcached" and version "1.0.1"		beta		Affected
Memcachedb Search vendor "Memcachedb"		Memcached Search vendor "Memcachedb" for product "Memcached"				1.0.2 Search vendor "Memcachedb" for product "Memcached" and version "1.0.2"		beta		Affected
Memcachedb Search vendor "Memcachedb"		Memcached Search vendor "Memcachedb" for product "Memcached"				1.0.3 Search vendor "Memcachedb" for product "Memcached" and version "1.0.3"		-		Affected
Memcachedb Search vendor "Memcachedb"		Memcached Search vendor "Memcachedb" for product "Memcached"				1.0.4 Search vendor "Memcachedb" for product "Memcached" and version "1.0.4"		-		Affected
Memcachedb Search vendor "Memcachedb"		Memcached Search vendor "Memcachedb" for product "Memcached"				1.1.0 Search vendor "Memcachedb" for product "Memcached" and version "1.1.0"		beta		Affected
Memcachedb Search vendor "Memcachedb"		Memcached Search vendor "Memcachedb" for product "Memcached"				1.1.12 Search vendor "Memcachedb" for product "Memcached" and version "1.1.12"		-		Affected
Memcachedb Search vendor "Memcachedb"		Memcached Search vendor "Memcachedb" for product "Memcached"				1.2.0 Search vendor "Memcachedb" for product "Memcached" and version "1.2.0"		-		Affected
Memcachedb Search vendor "Memcachedb"		Memcached Search vendor "Memcachedb" for product "Memcached"				1.2.0 Search vendor "Memcachedb" for product "Memcached" and version "1.2.0"		beta		Affected
Memcachedb Search vendor "Memcachedb"		Memcached Search vendor "Memcachedb" for product "Memcached"				1.2.1 Search vendor "Memcachedb" for product "Memcached" and version "1.2.1"		beta		Affected
Memcachedb Search vendor "Memcachedb"		Memcached Search vendor "Memcachedb" for product "Memcached"				1.2.2 Search vendor "Memcachedb" for product "Memcached" and version "1.2.2"		-		Affected
Memcachedb Search vendor "Memcachedb"		Memcached Search vendor "Memcachedb" for product "Memcached"				1.2.8 Search vendor "Memcachedb" for product "Memcached" and version "1.2.8"		-		Affected
Memcachedb Search vendor "Memcachedb"		Memcached Search vendor "Memcachedb" for product "Memcached"				1.4.0 Search vendor "Memcachedb" for product "Memcached" and version "1.4.0"		-		Affected
Memcachedb Search vendor "Memcachedb"		Memcached Search vendor "Memcachedb" for product "Memcached"				1.4.1 Search vendor "Memcachedb" for product "Memcached" and version "1.4.1"		-		Affected