CVE-2011-4971
NoneCVSS
—
EPSS
22.3%
Published
Dec 12, 2013
CISA due date
—
The record
Multiple integer signedness errors in the (1) process_bin_sasl_auth, (2) process_bin_complete_sasl_auth, (3) process_bin_update, and (4) process_bin_append_prepend functions in Memcached 1.4.5 and earlier allow remote attackers to cause a denial of service (crash) via a large body length value in a packet.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | memcached | 0 | 1.4.13-0.3 |
| Debian:12 | memcached | 0 | 1.4.13-0.3 |
| Debian:13 | memcached | 0 | 1.4.13-0.3 |
| Debian:6.0 | memcached | 0 | 1.4.5-1+deb6u1 |
| Debian:7 | memcached | 0 | 1.4.13-0.2+deb7u1 |
| Mageia:2 | memcached | 0 | 1.4.15-1.mga2 |
| Mageia:3 | memcached | 0 | 1.4.15-1.mga3 |
| SUSE:Enterprise Storage 4 | memcached | 0 | 1.4.39-3.3.2 |
| SUSE:OpenStack Cloud 6 | memcached | 0 | 1.4.39-3.3.1 |
| SUSE:OpenStack Cloud 7 | memcached | 0 | 1.4.39-3.3.2 |
| openSUSE:Tumbleweed | memcached | 0 | 1.4.33-1.1 |
Related vulnerabilities
- CVE-2017-9951 The try_read_command function in memcached.c in memcached before 1.4.39 allows remote… Also affects memcached
- CVE-2016-8704 An integer overflow in the process_bin_append_prepend function in Memcached, which is… Also affects memcached
- CVE-2016-8706 An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible… Also affects memcached
- CVE-2016-8705 Multiple integer overflows in process_bin_update function in Memcached, which is… Also affects memcached
- CVE-2010-1152 memcached.c in memcached before 1.4.3 allows remote attackers to cause a denial of… Also affects memcached
- CVE-2019-0201 An issue is present in Apache ZooKeeper 1.0.0 to 3.4.13 and 3.5.0-alpha to 3.5.4-beta. Also affects memcached
- CVE-2026-47784 In memcached before 1.6.42, password data for SASL password database authentication has a… Also affects memcached
- CVE-2026-47783 In memcached before 1.6.42, username data for SASL password database authentication has a… Also affects memcached