FKIE_CVE-2010-1152

Vulnerability from fkie_nvd - Published: 2010-04-12 18:30 - Updated: 2025-04-11 00:51
Severity ?
Summary
memcached.c in memcached before 1.4.3 allows remote attackers to cause a denial of service (daemon hang or crash) via a long line that triggers excessive memory allocation. NOTE: some of these details are obtained from third party information.
References
secalert@redhat.comhttp://blogs.sun.com/security/entry/input_validation_vulnerability_in_memcached
secalert@redhat.comhttp://code.google.com/p/memcached/issues/detail?id=102Exploit
secalert@redhat.comhttp://github.com/memcached/memcached/commit/75cc83685e103bc8ba380a57468c8f04413033f9Patch
secalert@redhat.comhttp://github.com/memcached/memcached/commit/d9cd01ede97f4145af9781d448c62a3318952719Patch
secalert@redhat.comhttp://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html
secalert@redhat.comhttp://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
secalert@redhat.comhttp://marc.info/?l=oss-security&m=127074597129559&w=2Patch
secalert@redhat.comhttp://marc.info/?l=oss-security&m=127075341110616&w=2Patch
secalert@redhat.comhttp://marc.info/?l=oss-security&m=127075808518733&w=2Patch
secalert@redhat.comhttp://secunia.com/advisories/39306Vendor Advisory
secalert@redhat.comhttp://securitytracker.com/id?1023839
secalert@redhat.comhttp://www.vupen.com/english/advisories/2011/0442
af854a3a-2127-422b-91ae-364da2661108http://blogs.sun.com/security/entry/input_validation_vulnerability_in_memcached
af854a3a-2127-422b-91ae-364da2661108http://code.google.com/p/memcached/issues/detail?id=102Exploit
af854a3a-2127-422b-91ae-364da2661108http://github.com/memcached/memcached/commit/75cc83685e103bc8ba380a57468c8f04413033f9Patch
af854a3a-2127-422b-91ae-364da2661108http://github.com/memcached/memcached/commit/d9cd01ede97f4145af9781d448c62a3318952719Patch
af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html
af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=oss-security&m=127074597129559&w=2Patch
af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=oss-security&m=127075341110616&w=2Patch
af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=oss-security&m=127075808518733&w=2Patch
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/39306Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1023839
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2011/0442
Impacted products
Vendor Product Version
memcachedb memcached *
memcachedb memcached 0.0.1
memcachedb memcached 0.0.2
memcachedb memcached 0.0.3
memcachedb memcached 0.0.4
memcachedb memcached 0.1.0
memcachedb memcached 0.1.1
memcachedb memcached 1.0.0
memcachedb memcached 1.0.1
memcachedb memcached 1.0.2
memcachedb memcached 1.0.3
memcachedb memcached 1.0.4
memcachedb memcached 1.1.0
memcachedb memcached 1.1.12
memcachedb memcached 1.2.0
memcachedb memcached 1.2.0
memcachedb memcached 1.2.1
memcachedb memcached 1.2.2
memcachedb memcached 1.2.8
memcachedb memcached 1.4.0
memcachedb memcached 1.4.1
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:memcachedb:memcached:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A05D93F0-7569-4465-99B4-09BB7333F875",
              "versionEndIncluding": "1.4.2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:memcachedb:memcached:0.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "5F664659-721C-4387-A06C-AD30DD9AF762",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:memcachedb:memcached:0.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "18A83632-06E4-4978-909A-5E145F7A654F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:memcachedb:memcached:0.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "9A511459-F98A-4192-8E79-24766D296A47",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:memcachedb:memcached:0.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "8DC3886A-4C1B-49B9-A334-E9A1C8CA5309",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:memcachedb:memcached:0.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "AD764B57-6985-4DD2-BA3C-09912715A56A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:memcachedb:memcached:0.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "E433DCE9-8C2E-47AC-907E-8306D322D0A6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:memcachedb:memcached:1.0.0:beta:*:*:*:*:*:*",
              "matchCriteriaId": "8164AFC1-6320-44C1-8872-9C26A5E1C173",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:memcachedb:memcached:1.0.1:beta:*:*:*:*:*:*",
              "matchCriteriaId": "6397D3FD-EF1F-4B0C-BA6C-26131820A653",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:memcachedb:memcached:1.0.2:beta:*:*:*:*:*:*",
              "matchCriteriaId": "2616A383-92BE-4FD2-8A62-8A2CF1F69830",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:memcachedb:memcached:1.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "F500EE98-0AAA-4C9E-91DF-313E6812CC50",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:memcachedb:memcached:1.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "DF0C217E-B2E4-472A-AE6A-C95D73C8FE4D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:memcachedb:memcached:1.1.0:beta:*:*:*:*:*:*",
              "matchCriteriaId": "07FCB8CB-1434-4486-858D-BC509246231D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:memcachedb:memcached:1.1.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "84BF997C-79FB-41F3-A4F5-455652BB2015",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:memcachedb:memcached:1.2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "8932E944-B3D8-489C-89C2-0A870AF51428",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:memcachedb:memcached:1.2.0:beta:*:*:*:*:*:*",
              "matchCriteriaId": "6BE87DDD-FF8E-47B2-A30B-7C32ADA6C02A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:memcachedb:memcached:1.2.1:beta:*:*:*:*:*:*",
              "matchCriteriaId": "A76FC002-9B7C-4F3D-A2E7-E416CD6C6336",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:memcachedb:memcached:1.2.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "E8789BF3-CA97-4DA2-99C4-53350CEEBB62",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:memcachedb:memcached:1.2.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "45A81180-5F55-4E8B-B4AF-8B646D694945",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:memcachedb:memcached:1.4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "D286241F-9DAE-43A1-80CE-701C7369F41D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:memcachedb:memcached:1.4.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "431884EE-1F51-4BAF-931D-27BAB9AD3317",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "memcached.c in memcached before 1.4.3 allows remote attackers to cause a denial of service (daemon hang or crash) via a long line that triggers excessive memory allocation.  NOTE: some of these details are obtained from third party information."
    },
    {
      "lang": "es",
      "value": "memcached.c en memcached anterior a v1.4.3 permite a atacantes remotos provocar una denegaci\u00f3n de servicio (fallo o bloqueo del demonio) a trav\u00e9s de una l\u00ednea larga que dispara la asignaci\u00f3n de memoria excesiva. NOTA: algunos de estos detalles han sido obtenidos de informaci\u00f3n de terceros."
    }
  ],
  "id": "CVE-2010-1152",
  "lastModified": "2025-04-11T00:51:21.963",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 5.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2010-04-12T18:30:00.837",
  "references": [
    {
      "source": "secalert@redhat.com",
      "url": "http://blogs.sun.com/security/entry/input_validation_vulnerability_in_memcached"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Exploit"
      ],
      "url": "http://code.google.com/p/memcached/issues/detail?id=102"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch"
      ],
      "url": "http://github.com/memcached/memcached/commit/75cc83685e103bc8ba380a57468c8f04413033f9"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch"
      ],
      "url": "http://github.com/memcached/memcached/commit/d9cd01ede97f4145af9781d448c62a3318952719"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch"
      ],
      "url": "http://marc.info/?l=oss-security\u0026m=127074597129559\u0026w=2"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch"
      ],
      "url": "http://marc.info/?l=oss-security\u0026m=127075341110616\u0026w=2"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch"
      ],
      "url": "http://marc.info/?l=oss-security\u0026m=127075808518733\u0026w=2"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/39306"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://securitytracker.com/id?1023839"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.vupen.com/english/advisories/2011/0442"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://blogs.sun.com/security/entry/input_validation_vulnerability_in_memcached"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://code.google.com/p/memcached/issues/detail?id=102"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://github.com/memcached/memcached/commit/75cc83685e103bc8ba380a57468c8f04413033f9"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://github.com/memcached/memcached/commit/d9cd01ede97f4145af9781d448c62a3318952719"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://marc.info/?l=oss-security\u0026m=127074597129559\u0026w=2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://marc.info/?l=oss-security\u0026m=127075341110616\u0026w=2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://marc.info/?l=oss-security\u0026m=127075808518733\u0026w=2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/39306"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1023839"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2011/0442"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.