Approved changes feed: RSS · Atom

cpe:2.3:a:memcached:memcached:1.5.5:*:*:*:*:*:*:*

part: a version: 1.5.5 update: *

VendorMemcached (063e345f-e662-52e6-b9fd-c6528bac70cd)
ProductMemcached (39010ffc-0f91-5c1d-962d-612c4428189d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/memcached purl2cpe 2026-06-01 10:11:11.230285
pkg:deb/ubuntu/memcached purl2cpe 2026-06-01 10:11:11.230286
pkg:docker/memcached purl2cpe 2026-06-01 10:11:11.230288
pkg:github/memcached/memcached purl2cpe 2026-06-01 10:11:11.230289
pkg:gitlab/redhat/memcached purl2cpe 2026-06-01 10:11:11.230290
pkg:rpm/centos/memcached purl2cpe 2026-06-01 10:11:11.230292
pkg:rpm/fedora/memcached purl2cpe 2026-06-01 10:11:11.230293

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-1000115 vulnerable 2026-06-08 05:10:25.449958 Details available
Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network Amplification, CWE-406) vulnerability in the UDP support of the memcached server that can result in denial of service via network flood (traffic amplification of 1:50,000 has been reported by reliable sources). This attack appear to be exploitable via network connectivity to port 11211 UDP. This vulnerability appears to have been fixed in 1.5.6 due to the disabling of the UDP protocol by default.
Published: 2018-03-05T14:00:00.000Z
Updated: 2024-08-05T12:33:49.333Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.