Approved changes feed: RSS · Atom
cpe:2.3:a:memcached:memcached:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Memcached (063e345f-e662-52e6-b9fd-c6528bac70cd) |
|---|---|
| Product | Memcached (39010ffc-0f91-5c1d-962d-612c4428189d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/memcached |
purl2cpe | 2026-06-01 10:11:11.229771 |
pkg:deb/ubuntu/memcached |
purl2cpe | 2026-06-01 10:11:11.229774 |
pkg:docker/memcached |
purl2cpe | 2026-06-01 10:11:11.229777 |
pkg:github/memcached/memcached |
purl2cpe | 2026-06-01 10:11:11.229779 |
pkg:gitlab/redhat/memcached |
purl2cpe | 2026-06-01 10:11:11.229782 |
pkg:rpm/centos/memcached |
purl2cpe | 2026-06-01 10:11:11.229785 |
pkg:rpm/fedora/memcached |
purl2cpe | 2026-06-01 10:11:11.229788 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-90698 |
vulnerable | 2026-09-16 04:33:05.245240 |
memcached mcmc Tokenizer proto_text.c try_read_command_asciiauth out-of-bounds
MEDIUM (5.3)
A security flaw has been discovered in memcached 1.6.41/1.6.42/1.6.43. This vulnerability affects the function try_read_command_asciiauth of the file proto_text.c of the component mcmc Tokenizer. The manipulation results in out-of-bounds read. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 1.6.44 is able to resolve this issue. The patch is identified as af05c9302bba508b736c3da1d5670f63fe8b7db4. You should upgrade the affected component.
Published: 2026-09-14T08:30:12.665Z
Updated: 2026-09-15T15:55:39.158Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-47784 |
vulnerable | 2026-06-08 08:05:12.239537 |
Details available
HIGH (8.1)
In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.
Published: 2026-05-20T05:45:37.864Z
Updated: 2026-05-20T12:21:02.894Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-47783 |
vulnerable | 2026-06-08 08:05:12.239118 |
Details available
HIGH (8.1)
In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass.
Published: 2026-05-20T05:43:46.976Z
Updated: 2026-09-18T12:04:50.505Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46853 |
vulnerable | 2026-06-08 06:14:23.607891 |
Details available
In Memcached before 1.6.22, an off-by-one error exists when processing proxy requests in proxy mode, if \n is used instead of \r\n.
Published: 2023-10-27T00:00:00.000Z
Updated: 2024-09-09T15:31:32.160Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46852 |
vulnerable | 2026-06-08 06:14:23.607251 |
Details available
In Memcached before 1.6.22, a buffer overflow exists when processing multiget requests in proxy mode, if there are many spaces after the "get" substring.
Published: 2023-10-27T00:00:00.000Z
Updated: 2024-09-09T15:36:33.049Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-22570 |
vulnerable | 2026-06-08 05:22:31.448384 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10931 |
vulnerable | 2026-06-08 05:16:36.062069 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11596 |
vulnerable | 2026-06-08 05:12:37.706054 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1000127 |
vulnerable | 2026-06-08 05:10:25.486666 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9951 |
vulnerable | 2026-06-08 05:10:20.166252 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8706 |
vulnerable | 2026-06-08 05:08:14.634269 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8705 |
vulnerable | 2026-06-08 05:08:14.633887 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-8704 |
vulnerable | 2026-06-08 05:08:14.633404 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-7291 |
vulnerable | 2026-06-08 05:05:09.456311 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-7239 |
vulnerable | 2026-06-08 05:05:08.778718 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4971 |
vulnerable | 2026-06-08 04:59:34.128038 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.