PHP-Memcached v2.2.0 and below contains an improper NULL termination which allows attackers to execute CLRF injection.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | php-memcached | <= 3.2.0+2.2.0-4 | php-memcached_3.2.0+2.2.0-4_all.deb |
Debian | 11 | all | php-memcached | <= 3.1.5+2.2.0-5+deb11u1 | php-memcached_3.1.5+2.2.0-5+deb11u1_all.deb |
Debian | 10 | all | php-memcached | <= 3.1.3+2.2.0-1 | php-memcached_3.1.3+2.2.0-1_all.deb |
Debian | 999 | all | php-memcached | <= 3.2.0+2.2.0-4 | php-memcached_3.2.0+2.2.0-4_all.deb |