Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2022-48571: udp: crash fix when receiving multi-packet uploads · memcached/memcached@6b319c8

memcached 1.6.7 allows a Denial of Service via multi-packet uploads in UDP.

CVE
#dos#memcached

Expand Up @@ -1183,9 +1183,9 @@ bool resp_has_stack(conn *c) {
void out_string(conn *c, const char *str) { size_t len; assert(c != NULL); mc_resp *resp = c->resp;
assert(c != NULL); // if response was original filled with something, but we’re now writing // out an error or similar, have to reset the object first. // TODO: since this is often redundant with allocation, how many callers Expand Down Expand Up @@ -2604,7 +2604,6 @@ static enum try_read_result try_read_udp(conn *c) {
/* If this is a multi-packet request, drop it. */ if (buf[4] != 0 || buf[5] != 1) { out_string(c, “SERVER_ERROR multi-packet request not supported”); return READ_NO_DATA_RECEIVED; }
Expand Down

Related news

Ubuntu Security Notice USN-6382-1

Ubuntu Security Notice 6382-1 - It was discovered that Memcached incorrectly handled certain multi-packet uploads in UDP. An attacker could possibly use this issue to cause a denial of service.

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907