BIT-libmemcached-2023-27478
See a problem?- Import Source
- https://github.com/bitnami/vulndb/tree/main/data/libmemcached/BIT-libmemcached-2023-27478.json
- JSON Data
- https://api.osv.dev/v1/vulns/BIT-libmemcached-2023-27478
- Aliases
-
- BIT-memcached-2023-27478
- CVE-2023-27478
- GHSA-wwmh-39wj-fx59
- Published
- 2024-03-06T10:55:12.076Z
- Modified
- 2025-10-15T02:27:16.436330Z
- Summary
- Disclosure of unrelated data in libmemcached-awesome
- Details
-
libmemcached-awesome is an open source C/C++ client library and tools for the memcached server.
libmemcachedcould return data for a previously requested key, if that previous request timed out due to a lowPOLL_TIMEOUT. This issue has been addressed in version 1.1.4. Users are advised to upgrade. There are several ways to workaround or lower the probability of this bug affecting a given deployment. 1: use a reasonably highPOLL_TIMEOUTsetting, like the default. 2: use separate libmemcached connections for unrelated data. 3: do not re-use libmemcached connections in an unknown state. - Database specific
{ "cpes": [ "cpe:2.3:a:awesome:libmemcached:*:*:*:*:*:*:*:*" ], "severity": "Medium" }- References
-
- https://github.com/awesomized/libmemcached/commit/48dcc61a
- https://github.com/awesomized/libmemcached/releases/tag/1.1.4
- https://github.com/awesomized/libmemcached/security/advisories/GHSA-wwmh-39wj-fx59
- https://github.com/php-memcached-dev/php-memcached/issues/531
- https://nvd.nist.gov/vuln/detail/CVE-2023-27478
Affected packages
Bitnami / libmemcached
Package
- Name
- libmemcached
- Purl
- pkg:bitnami/libmemcached
Severity
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVSS Calculator