CVE-2018-1000127

Description

memcached version prior to 1.4.37 contains an Integer Overflow vulnerability in items.c:item_free() that can result in data corruption and deadlocks due to items existing in hash table being reused from free list. This attack appear to be exploitable via network connectivity to the memcached service. This vulnerability appears to have been fixed in 1.4.37 and later.

Risk Information

Base Score

7.5

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

1.002

Associated Vulnerability

Vulnerability	OS Platform
high-performance memory object caching system (USN-3601-1) memcached_1.4.14-0ubuntu9.3_i386.deb	Linux
high-performance memory object caching system (USN-3601-1) memcached_1.4.14-0ubuntu9.3_amd64.deb	Linux
high-performance memory object caching system (USN-3601-1) memcached_1.4.25-2ubuntu1.4_i386.deb	Linux
high-performance memory object caching system (USN-3601-1) memcached_1.4.25-2ubuntu1.4_amd64.deb	Linux
high-performance memory object caching system (USN-3601-1) memcached_1.4.33-1ubuntu3.3_i386.deb	Linux
high-performance memory object caching system (USN-3601-1) memcached_1.4.33-1ubuntu3.3_amd64.deb	Linux
memcached security update(DSA-4218-1) memcached_1.4.33-1+deb9u1_i386.deb	Linux
memcached security update(DSA-4218-1) memcached_1.4.33-1+deb9u1_amd64.deb	Linux
memcached security update(DSA-4218-1) memcached_1.4.21-1.1+deb8u2_i386.deb	Linux
memcached security update(DSA-4218-1) memcached_1.4.21-1.1+deb8u2_amd64.deb	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234