Lucene search

K
ubuntucveUbuntu.comUB:CVE-2021-37519
HistoryFeb 03, 2023 - 12:00 a.m.

CVE-2021-37519

2023-02-0300:00:00
ubuntu.com
ubuntu.com
13
buffer overflow
memcached 1.6.9
cve-2021-37519
denial of service
authfile vulnerability
crafted authentication file
unix

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

33.9%

Buffer Overflow vulnerability in authfile.c memcached 1.6.9 allows
attackers to cause a denial of service via crafted authenticattion file.

Bugs

Notes

Author Note
mdeslaur This is a minor issue, an attacker would have to be able to create an auth file, and even so, it will result only in a denial of service.
OSVersionArchitecturePackageVersionFilename
ubuntu20.04noarchmemcached< anyUNKNOWN

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

33.9%