ALT-PU-2019-1854-1
Closed vulnerabilities
Published: 2019-04-29
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2019-11596
In memcached before 1.5.14, a NULL pointer dereference was found in the "lru mode" and "lru temp_ttl" commands. This causes a denial of service when parsing crafted lru command messages in process_lru_command in memcached.c.
Severity: HIGH (7.5)
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References:
- openSUSE-SU-2020:0721
- openSUSE-SU-2020:0721
- https://github.com/memcached/memcached/commit/d35334f368817a77a6bd1f33c6a5676b2c402c02
- https://github.com/memcached/memcached/commit/d35334f368817a77a6bd1f33c6a5676b2c402c02
- https://github.com/memcached/memcached/compare/ee1cfe3...50bdc9f
- https://github.com/memcached/memcached/compare/ee1cfe3...50bdc9f
- https://github.com/memcached/memcached/issues/474
- https://github.com/memcached/memcached/issues/474
- FEDORA-2019-2bd8e73268
- FEDORA-2019-2bd8e73268
- FEDORA-2019-df4c0ba2db
- FEDORA-2019-df4c0ba2db
- USN-3963-1
- USN-3963-1