CVE-2013-7239

Description

memcached before 1.4.17 allows remote attackers to bypass authentication by sending an invalid request with SASL credentials, then sending another request with incorrect SASL credentials.

How to fix CVE-2013-7239

To remediate CVE-2013-7239, upgrade the affected package to a fixed version below.

• Debian/memcached—upgrade to 1.4.13-0.3 or later

Is CVE-2013-7239 being exploited?

Low — EPSS is 0.3%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 1.4.13-0.3

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2013-7239