Out-of-bounds read in memcached - CVE-2019-15026

Vulnerability identifier: #VU20847

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-15026

CWE-ID: CWE-125

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to stack-based buffer over-read in conn_to_str() function in memcached.c. A remote attacker can perform a denial of service attack.

memcached
memcached (Ubuntu package)
memcached
memcached-debugsource
memcached-debuginfo
memcached-devel
memcached-selinux
memcached-help
Opensuse
openEuler
Fedora

Install update from vendor's website.

memcached - update to 1.5.17
memcached (Ubuntu package) - addressed in versions 1.4.25-2ubuntu1.5, 1.5.6-0ubuntu1.2, 1.5.10-0ubuntu1.19.04.2
memcached - update to 1.5.10-6
memcached-debugsource - update to 1.5.10-6
memcached-debuginfo - update to 1.5.10-6
memcached-devel - update to 1.5.10-6
memcached-selinux - update to 1.5.10-6
memcached-help - update to 1.5.10-6
memcached - addressed in versions 1.5.14-2.fc29, 1.5.14-2.fc30, 1.5.17-1.fc31

• https://github.com/memcached/memcached/commit/554b56687a19300a75ec24184746b5512580c819
• https://github.com/memcached/memcached/wiki/ReleaseNotes1517

• Denial of service in memcached
• Ubuntu update for Memcached
• OpenSUSE Linux update for memcached
• openEuler update for memcached
• Fedora 31 update for memcached
• Fedora 30 update for memcached
• Fedora 29 update for memcached