CRITICAL9.8CVE-2023-46853In Memcached before 1.6.22, an off-by-one error exists when processing proxy requests in proxy mode, if \n is used instead of \r\n.
from 0, < 1.6.22
HIGH8.1CVE-2026-47784In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sas…
from 0, < 1.6.42
HIGH8.1CVE-2026-47783In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon…
from 0, < 1.6.42
HIGH7.5In Memcached before 1.6.22, a buffer overflow exists when processing multiget requests in proxy mode, if there are many spaces after the "g…
from 0, < 1.6.22
HIGH7.5memcached - security update
from 0, < 1.6.8
HIGH7.5Memcached 1.6.0 before 1.6.3 allows remote attackers to cause a denial of service (daemon crash) via a crafted meta command.
>= 1.6.0, < 1.6.3
HIGH7.5Memcached 1.6.x before 1.6.2 allows remote attackers to cause a denial of service (daemon crash) via a crafted binary protocol header to tr…
>= 1.6.0, < 1.6.2
MEDIUM6.5Disclosure of unrelated data in libmemcached-awesome
>= 1.0.18, < 1.1.4
MEDIUM5.5Buffer Overflow vulnerability in authfile.c memcached 1.6.9 allows attackers to cause a denial of service via crafted authenticattion file.