CVE-2013-0179
Gentoo Linux Security Advisory 201406-13
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
1Exploited in Wild
-Decision
Descriptions
The process_bin_delete function in memcached.c in memcached 1.4.4 and other versions before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service (segmentation fault) via a request to delete a key, which does not account for the lack of a null terminator in the key and triggers a buffer over-read when printing to stderr.
La función process_bin_delete en memcached.c de memcached 1.4.4 y otras versiones anteriores a 1.4.17, cuando se ejecutan en modo verboso, permite a atacantes remotos provocar una denegación de servicio (fallo de segmentación) a través de una petición que elimina una clave, que no tiene en cuenta la falta de un terminador nulo en la clave y desencadena una sobre-lectura de búfer cuando se imprime hacia stderr.
Stefan Bucur discovered that Memcached incorrectly handled certain large body lengths. A remote attacker could use this issue to cause Memcached to crash, resulting in a denial of service. Jeremy Sowden discovered that Memcached incorrectly handled logging certain details when the -vv option was used. An attacker could use this issue to cause Memcached to crash, resulting in a denial of service. It was discovered that Memcached incorrectly handled SASL authentication. A remote attacker could use this issue to bypass SASL authentication completely. This issue only affected Ubuntu 12.10, Ubuntu 13.04 and Ubuntu 13.10. Various other issues were also addressed.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2012-12-06 CVE Reserved
- 2014-01-13 CVE Published
- 2024-08-06 CVE Updated
- 2024-08-06 First Exploit
- 2025-04-11 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (9)
| URL | Tag | Source |
|---|---|---|
| http://www.openwall.com/lists/oss-security/2013/01/14/4 | Mailing List |
|
| http://www.openwall.com/lists/oss-security/2013/01/14/6 | Mailing List |
|
| http://www.securityfocus.com/bid/64978 | Vdb Entry | |
| https://bugzilla.redhat.com/show_bug.cgi?id=895054 | X_refsource_confirm | |
| https://code.google.com/p/memcached/issues/attachmentText?id=306&aid=3060004000&name=0001-Fix-buffer-overrun-when-logging-key-to-delete-in-bin.patch&token=3GEzHThBL5cxmUrsYANkW03RrNY%3A1358179503096 | X_refsource_confirm | |
| https://code.google.com/p/memcached/wiki/ReleaseNotes1417 | X_refsource_confirm |
| URL | Date | SRC |
|---|---|---|
| https://code.google.com/p/memcached/issues/detail?id=306 | 2024-08-06 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/56183 | 2018-03-25 | |
| http://www.ubuntu.com/usn/USN-2080-1 | 2018-03-25 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Memcached Search vendor "Memcached" | Memcached Search vendor "Memcached" for product "Memcached" | 1.4.4 Search vendor "Memcached" for product "Memcached" and version "1.4.4" | - |
Affected
| ||||||
| Memcached Search vendor "Memcached" | Memcached Search vendor "Memcached" for product "Memcached" | 1.4.5 Search vendor "Memcached" for product "Memcached" and version "1.4.5" | - |
Affected
| ||||||
| Memcached Search vendor "Memcached" | Memcached Search vendor "Memcached" for product "Memcached" | 1.4.6 Search vendor "Memcached" for product "Memcached" and version "1.4.6" | - |
Affected
| ||||||
| Memcached Search vendor "Memcached" | Memcached Search vendor "Memcached" for product "Memcached" | 1.4.7 Search vendor "Memcached" for product "Memcached" and version "1.4.7" | - |
Affected
| ||||||
| Memcached Search vendor "Memcached" | Memcached Search vendor "Memcached" for product "Memcached" | 1.4.8 Search vendor "Memcached" for product "Memcached" and version "1.4.8" | - |
Affected
| ||||||
| Memcached Search vendor "Memcached" | Memcached Search vendor "Memcached" for product "Memcached" | 1.4.9 Search vendor "Memcached" for product "Memcached" and version "1.4.9" | - |
Affected
| ||||||
| Memcached Search vendor "Memcached" | Memcached Search vendor "Memcached" for product "Memcached" | 1.4.10 Search vendor "Memcached" for product "Memcached" and version "1.4.10" | - |
Affected
| ||||||
| Memcached Search vendor "Memcached" | Memcached Search vendor "Memcached" for product "Memcached" | 1.4.11 Search vendor "Memcached" for product "Memcached" and version "1.4.11" | - |
Affected
| ||||||
| Memcached Search vendor "Memcached" | Memcached Search vendor "Memcached" for product "Memcached" | 1.4.12 Search vendor "Memcached" for product "Memcached" and version "1.4.12" | - |
Affected
| ||||||
| Memcached Search vendor "Memcached" | Memcached Search vendor "Memcached" for product "Memcached" | 1.4.13 Search vendor "Memcached" for product "Memcached" and version "1.4.13" | - |
Affected
| ||||||
| Memcached Search vendor "Memcached" | Memcached Search vendor "Memcached" for product "Memcached" | 1.4.14 Search vendor "Memcached" for product "Memcached" and version "1.4.14" | - |
Affected
| ||||||
| Memcached Search vendor "Memcached" | Memcached Search vendor "Memcached" for product "Memcached" | 1.4.15 Search vendor "Memcached" for product "Memcached" and version "1.4.15" | - |
Affected
| ||||||
| Memcached Search vendor "Memcached" | Memcached Search vendor "Memcached" for product "Memcached" | 1.4.16 Search vendor "Memcached" for product "Memcached" and version "1.4.16" | - |
Affected
| ||||||