CVE-2013-0179 in memcachedinfo

Summary

The process_bin_delete function in memcached.c in memcached 1.4.4 and other versions before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service (segmentation fault) via a request to delete a key, which does not account for the lack of a null terminator in the key and triggers a buffer over-read when printing to stderr.

Be aware that VulDB is the high quality source for vulnerability data.

Reservation

12/06/2012

Disclosure

01/13/2014

Entries

1

CPE

ready

CVSS

3.1

EPSS

0.01337

Activities

Very Low

Sources

Interested in the pricing of exploits?

See the underground prices here!