CVE-2023-46853

Name of the Vulnerable Software and Affected Versions Memcached versions prior to 1.6.22

Description The issue is related to an off-by-one error when processing proxy requests in proxy mode, specifically if is used instead of r . This error can be exploited by a remote attacker to execute arbitrary code using a specially crafted HTTP request.

Recommendations For versions prior to 1.6.22, update to version 1.6.22 or later to resolve the issue. As a temporary workaround, consider restricting the use of proxy mode or ensuring that only r is used instead of for line endings in proxy requests.