CVE-2026-47784

CVSS 8.1 HIGHEPSS 0.5%CWE-208

In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Produtos afetados

memcached · memcached

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://github.com/memcached/memcached/commit/d13f282b4bce33a9c33b8a1bbf07f12114160fed https://github.com/memcached/memcached/compare/1.6.41...1.6.42 https://github.com/memcached/memcached/wiki/ReleaseNotes1642