CVE-2026-47784
In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.
- Обновитесь до 1.6.38-1ubuntu0.1
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
За последние 30 дней в memcached опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 2
In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.
In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass.
Сопоставьте установленный стек и версии со свежими базами уязвимостей.