← Back

CVE-2013-7290

nvd nist
Published: Jan 13, 2014Modified: Apr 29, 2026

JSON object

Loading...
1.8
Vector
AV:A/AC:H/Au:N/C:N/I:N/A:P
Exploitability: 3.2 / Impact: 2.9
Source: NVD

Description

The do_item_get function in items.c in memcached 1.4.4 and other versions before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service (segmentation fault) via a request to delete a key, which does not account for the lack of a null terminator in the key and triggers a buffer over-read when printing to stderr, a different vulnerability than CVE-2013-0179.

Affected (13)

Products: Memcached: Memcached
1 product
Memcached
Configuration A
13 vulnerable
Vulnerable SoftwareAffected Versions
Memcached
Version 1.4.10
Version 1.4.11
Version 1.4.12
Version 1.4.13
Version 1.4.14
Version 1.4.15
Version 1.4.16
Version 1.4.4
Version 1.4.5
Version 1.4.6
Version 1.4.7
Version 1.4.8
Version 1.4.9

References (6)

Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatch
Source: af854a3a-2127-422b-91ae-364da2661108
Patch

Timeline

No history available yet.