Off-by-one in memcached - CVE-2023-46853

Vulnerability identifier: #VU83024

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-46853

CWE-ID: CWE-193

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to an off-by-one error in proxy_request.c. A remote attacker can send a specially crafted HTTP request to the proxy server, trigger an off-by-one error and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

memcached
Amazon Linux AMI
Ubuntu
Anolis OS
memcached (Ubuntu package)
memcached
memcached-devel
memcached-selinux
memcached-doc

Install updates from vendor's website.

memcached - update to 1.6.22
memcached (Ubuntu package) - addressed in versions 1.6.14-1ubuntu0.1, 1.6.18-1ubuntu0.1, 1.6.21-1ubuntu0.23.10.1
memcached - update to 1.6.22-1
memcached-devel - update to 1.6.22-1
memcached-selinux - update to 1.6.22-1
memcached-doc - update to 1.6.22-1
memcached - update to 1.6.22-2

• https://github.com/memcached/memcached/compare/1.6.21...1.6.22
• https://github.com/memcached/memcached/commit/6987918e9a3094ec4fc8976f01f769f624d790fa

• Multiple vulnerabilities in Memcached
• Ubuntu update for memcached
• Amazon Linux AMI update for memcached
• Anolis OS update for memcached