p PatchFirst

CVE-2011-4971

CVE-2011-4971

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Multiple integer signedness errors in the (1) process_bin_sasl_auth, (2) process_bin_complete_sasl_auth, (3) process_bin_update, and (4) process_bin_append_prepend functions in Memcached 1.4.5 and earlier allow remote attackers to cause a denial of service (crash) via a large body length value in a packet.

EPSS 22.3% · Public exploit · Fix available

Published
Updated

Stack: system · database

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • memcached Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.4.13-0.3

    Update to 1.4.13-0.3

  • memcached Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.4.13-0.3

    Update to 1.4.13-0.3

  • memcached Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.4.13-0.3

    Update to 1.4.13-0.3

Original sources

Check your server →