Início
Início
Tendências
Tendências
Vulnerabilidades
Vulnerabilidades
Notícias
Notícias
Pesquisadores
Pesquisadores
Por que dbugs?
Por que dbugs?
Configurações

Jiejieling

#36844de 56,330
7.5CVSS total
Vulnerabilidades · 1
PT-2018-1892
7.5
2017-07-20
Memcached · Memcached · CVE-2018-1000127
**Name of the Vulnerable Software and Affected Versions** memcached versions prior to 1.4.37 **Description** The issue is related to an integer overflow in the memcached data caching software. Exploitation of this issue can be done remotely and may lead to resource leakage, data corruption, deadlock, or crash. The vulnerability is located in the `item free()` function in `items.c` and can cause data corruption and deadlocks due to the reuse of items in the hash table from the free list. This attack appears to be exploitable via network connectivity to the memcached service. **Recommendations** For memcached versions prior to 1.4.37, update to version 1.4.37 or later to resolve the issue. As a temporary workaround, consider restricting network connectivity to the memcached service to minimize the risk of exploitation.