VDB
CVE-2010-1152
CVE-2010-1152
PUBLISHED
CVSS 5 MEDIUM
memcached.c in memcached before 1.4.3 allows remote attackers to cause a denial of service (daemon hang or crash) via a long line that triggers excessive memory allocation. NOTE: some of these details are obtained from third party information.
EPSS 10.44% · 95.7th percentile
Risk Scores
CVSS 2.0
5
EPSS Score
10.44%
95.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | * |
| memcachedb | memcached | 0.0.1, 0.1.0, 1.0.0 |
Timeline
- Apr 12, 2010 CVE Published
- Apr 27, 2010 PoC Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Feb 10, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- Jul 18, 2023 EPSS Score
- Jul 27, 2023 EPSS Score
References
- [oss-security] 20100408 Re: CVE request -- memcached mailing-list
- http://github.com/memcached/memcached/commit/75cc83685e103bc8ba380a57468c8f04413033f9 url
- 39306 third-party-advisory
- ADV-2011-0442 vdb
- https://nvd.nist.gov/vuln/detail/CVE-2010-1152 advisory
- http://marc.info/?l=oss-security&m=127074597129559&w=2 url
- http://securitytracker.com/id?1023839 url
- http://blogs.sun.com/security/entry/input_validation_vulnerability_in_memcached technical
- http://code.google.com/p/memcached/issues/detail?id=102 exploit
- http://github.com/memcached/memcached/commit/d9cd01ede97f4145af9781d448c62a3318952719 patch
- http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html technical
- http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html technical
- http://marc.info/?l=oss-security&m=127075808518733&w=2 patch