CVE-2026-47784

Опубликовано: 20 мая 2026

Источник: nvd

CVSS3: 8.1

EPSS Низкий

Описание

In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:memcached:memcached:*:*:*:*:*:*:*:*

Версия до 1.6.42 (исключая)

EPSS

Процентиль: 43%

0.0055

Низкий

8.1 High

CVSS3

Дефекты

CWE-208

Связанные уязвимости

CVE-2026-47784

CVSS3: 8.1

ubuntu

3 месяца назад

In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.

CVE-2026-47784

CVSS3: 5.9

redhat

3 месяца назад

In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.

CVE-2026-47784

CVSS3: 8.1

msrc

3 месяца назад

In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.

CVE-2026-47784

CVSS3: 8.1

debian

3 месяца назад

In memcached before 1.6.42, password data for SASL password database a ...

GHSA-r4h3-4q3v-2776

CVSS3: 8.1

github

3 месяца назад

In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.

EPSS

Процентиль: 43%

0.0055

Низкий

8.1 High

CVSS3

Дефекты

CWE-208