| Package | Affected versions | Patched versions |
|---|---|---|
| memcached | < 1.6.42 | 1.6.42 |
In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free