DeutschShown in its original language — a full translation is planned for a future version.
memcached: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen
view advisory published 2026-05-20
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in memcached ausnutzen, um vertrauliche Informationen offenzulegen und die Authentifizierung zu umgehen, was möglicherweise weitere Angriffe ermöglicht.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-47784US | — | — | ||
In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass. | ||||
| CVE-2026-47783US | — | — | ||
In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_serv… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:23261 vom 2026-06-04external
- Red Hat Security Advisory RHSA-2026:27842 vom 2026-06-22external
- Red Hat Security Advisory RHSA-2026:27862 vom 2026-06-22external
- Rocky Linux Security Advisory RLSA-2026:27842 vom 2026-06-24external
- Rocky Linux Security Advisory RLSA-2026:27862 vom 2026-06-24external
- GitHub Security Advisory GHSA-QJPX-J6J4-8XPR vom 2026-05-20external
- GitHub Security Advisory GHSA-R4H3-4Q3V-2776 vom 2026-05-20external
- Memcached 1.6.42 Release Notes vom 2026-05-20external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan