|Number of vulnerabilities||1|
Operating systems & Components / Operating system
memcached (Ubuntu package)
Operating systems & Components / Operating system package or component
This security bulletin contains one medium risk vulnerability.
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input when processing multi-packet uploads in UDP within the resp_has_stack() function in memcached.c. A remote attacker can send specially crafted packets to the application and perform a denial of service (DoS) attack.Mitigation
Update the affected package memcached to the latest version.Vulnerable software versions
Ubuntu: 16.04 - 20.04
memcached (Ubuntu package): before Ubuntu ProFixed software versions
Q & A
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?