| Package | Affected versions | Patched versions |
|---|---|---|
| memcached | < 1.6.42 | 1.6.42 |
In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free