CVE-2026-47784

Опубликовано: 21 мая 2026

Источник: msrc

CVSS3: 8.1

EPSS Низкий

Описание

In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.

EPSS

Процентиль: 42%

0.0055

Низкий

8.1 High

CVSS3

Связанные уязвимости

CVE-2026-47784

CVSS3: 8.1

ubuntu

3 месяца назад

In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.

CVE-2026-47784

CVSS3: 5.9

redhat

3 месяца назад

In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.

CVE-2026-47784

CVSS3: 8.1

nvd

3 месяца назад

In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.

CVE-2026-47784

CVSS3: 8.1

debian

3 месяца назад

In memcached before 1.6.42, password data for SASL password database a ...

GHSA-r4h3-4q3v-2776

CVSS3: 8.1

github

3 месяца назад

In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.

EPSS

Процентиль: 42%

0.0055

Низкий

8.1 High

CVSS3