Memcached up to 1.5.13 lru memcached.c process_lru_command Messages null pointer dereference

Summaryinfo

A vulnerability was found in Memcached up to 1.5.13. It has been rated as problematic. This affects the function process_lru_command of the file memcached.c of the component lru Handler. This manipulation as part of Messages causes null pointer dereference. This vulnerability is tracked as CVE-2019-11596. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is advised.

Detailsinfo

A vulnerability was found in Memcached up to 1.5.13. It has been declared as problematic. Affected by this vulnerability is the function process_lru_command of the file memcached.c of the component lru Handler. The manipulation as part of a Messages leads to a null pointer dereference vulnerability. The CWE definition for the vulnerability is CWE-476. A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit. As an impact it is known to affect availability. The summary by CVE is:

In memcached before 1.5.14, a NULL pointer dereference was found in the "lru mode" and "lru temp_ttl" commands. This causes a denial of service when parsing crafted lru command messages in process_lru_command in memcached.c.

The bug was discovered 04/09/2017. The weakness was disclosed 04/29/2019 (Website). The advisory is shared at lists.fedoraproject.org. This vulnerability is known as CVE-2019-11596 since 04/29/2019. The exploitation appears to be easy. The attack can be launched remotely. The exploitation doesn't need any form of authentication. Technical details are known, but no exploit is available.

The vulnerability was handled as a non-public zero-day exploit for at least 750 days. During that time the estimated underground price was around $0-$5k. The commercial vulnerability scanner Qualys is able to test this issue with plugin 197446 (Ubuntu Security Notification for Memcached Vulnerability (USN-3963-1)).

Upgrading to version 1.5.14 eliminates this vulnerability.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Name

• Memcached

Version

• 1.5.0
• 1.5.1
• 1.5.2
• 1.5.3
• 1.5.4
• 1.5.5
• 1.5.6
• 1.5.7
• 1.5.8
• 1.5.9
• 1.5.10
• 1.5.11
• 1.5.12
• 1.5.13

License

• open-source

Website

• Product: https://github.com/memcached/memcached/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion