Libmemcached
Approved changes feed: RSS · Atom
cpe:2.3:a:awesome:libmemcached:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Awesome (a85bfa50-7faf-527f-b2b2-273f1732f7be) |
|---|---|
| Product | Libmemcached (4cb8c65a-7a97-58f0-a44a-92c8823d3f27) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/libmemcached |
purl2cpe | 2026-06-01 10:15:13.806020 |
pkg:deb/ubuntu/libmemcached |
purl2cpe | 2026-06-01 10:15:13.806023 |
pkg:github/awesomized/libmemcached |
purl2cpe | 2026-06-01 10:15:13.806026 |
pkg:gitlab/redhat/libmemcached |
purl2cpe | 2026-06-01 10:15:13.806028 |
pkg:rpm/fedora/libmemcached |
purl2cpe | 2026-06-01 10:15:13.806031 |
pkg:rpm/opensuse/libmemcached |
purl2cpe | 2026-06-01 10:15:13.806034 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-27478 |
vulnerable | 2026-06-08 05:57:41.686023 |
Disclosure of unrelated data in libmemcached-awesome
MEDIUM (6.5)
libmemcached-awesome is an open source C/C++ client library and tools for the memcached server. `libmemcached` could return data for a previously requested key, if that previous request timed out due to a low `POLL_TIMEOUT`. This issue has been addressed in version 1.1.4. Users are advised to upgrade. There are several ways to workaround or lower the probability of this bug affecting a given deployment. 1: use a reasonably high `POLL_TIMEOUT` setting, like the default. 2: use separate libmemcached connections for unrelated data. 3: do not re-use libmemcached connections in an unknown state.
Published: 2023-03-07T17:55:39.172Z
Updated: 2025-02-25T15:00:43.455Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.