CVE-2019-15026

Description

References

• lists.opensuse.org/opensuse-security-announce/2020-05/msg00060.html
• memcached/memcached commit 554b566 · Patch
• memcached/memcached · Release Notes
• lists.debian.org/debian-lts-announce/2019/09/msg00006.html
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EOD422IS2OPXRDID5EKFZHFUHK2BLQGJ
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FYGUBOEM5HX4GRMWVEKOJUFICF77ME47
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QDBV5OGV3FJDAH4NO4JSXNRWHDGGKWYB
• usn.ubuntu.com/4125-1

memcached의 다른 취약점

• CVE-2026-47784높음 8.1In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl…
• CVE-2026-47783높음 8.1In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon a…
• CVE-2023-46853심각 9.8In Memcached before 1.6.22, an off-by-one error exists when processing proxy requests in proxy mode, if \n is used instead of \r\n.
• CVE-2023-46852높음 7.5In Memcached before 1.6.22, a buffer overflow exists when processing multiget requests in proxy mode, if there are many spaces after the "ge…
• CVE-2022-48571높음 7.5memcached 1.6.7 allows a Denial of Service via multi-packet uploads in UDP.