CVE-2013-7290

The do_item_get function in items.c in memcached 1.4.4 and other versions before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service (segmentation fault) via a request to delete a key, which does not account for the lack of a null terminator in the key and triggers a buffer over-read when printing to stderr, a different vulnerability than CVE-2013-0179.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:memcached:memcached:1.4.4:*:*:*:*:*:*:*
cpe:2.3:a:memcached:memcached:1.4.5:*:*:*:*:*:*:*
cpe:2.3:a:memcached:memcached:1.4.6:*:*:*:*:*:*:*
cpe:2.3:a:memcached:memcached:1.4.7:*:*:*:*:*:*:*
cpe:2.3:a:memcached:memcached:1.4.8:*:*:*:*:*:*:*
cpe:2.3:a:memcached:memcached:1.4.9:*:*:*:*:*:*:*
cpe:2.3:a:memcached:memcached:1.4.10:*:*:*:*:*:*:*
cpe:2.3:a:memcached:memcached:1.4.11:*:*:*:*:*:*:*
cpe:2.3:a:memcached:memcached:1.4.12:*:*:*:*:*:*:*
cpe:2.3:a:memcached:memcached:1.4.13:*:*:*:*:*:*:*
cpe:2.3:a:memcached:memcached:1.4.14:*:*:*:*:*:*:*
cpe:2.3:a:memcached:memcached:1.4.15:*:*:*:*:*:*:*
cpe:2.3:a:memcached:memcached:1.4.16:*:*:*:*:*:*:*

History

No history.

Information

Published : 2014-01-13 21:55

Updated : 2024-02-04 18:16


NVD link : CVE-2013-7290

Mitre link : CVE-2013-7290

CVE.ORG link : CVE-2013-7290


JSON object : View

Products Affected

memcached

  • memcached
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer