Logo
componentmemcached
Name
memcached
Version
1.6.31-r
Type
library
Description
-
Licenses
-
PURL
-
CPE
cpe:2.3:a:memcached:memcached:1.6.31:*:*:*:*:*:*:*

Other Versions#


Project
Branch
Version
openwrt-25.12
1.6.31-r1

Vulnerabilities#


Name
Analysis
Description
Exploitable
In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.
Exploitable
In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass.