Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r4h3-4q3v-2776

Опубликовано: 20 мая 2026
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.

In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.

EPSS

Процентиль: 43%
0.0055
Низкий

8.1 High

CVSS3

Дефекты

CWE-208

Связанные уязвимости

CVSS3: 8.1
ubuntu
3 месяца назад

In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.

CVSS3: 5.9
redhat
3 месяца назад

In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.

CVSS3: 8.1
nvd
3 месяца назад

In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.

CVSS3: 8.1
msrc
3 месяца назад

In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.

CVSS3: 8.1
debian
3 месяца назад

In memcached before 1.6.42, password data for SASL password database a ...

EPSS

Процентиль: 43%
0.0055
Низкий

8.1 High

CVSS3

Дефекты

CWE-208