Описание
In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 1.6.45-1 |
| esm-infra-legacy/xenial | needs-triage | |
| esm-infra/bionic | needs-triage | |
| esm-infra/focal | needs-triage | |
| jammy | released | 1.6.14-1ubuntu0.2 |
| noble | released | 1.6.24-1ubuntu0.1 |
| questing | released | 1.6.38-1ubuntu0.1 |
| resolute | released | 1.6.40-1ubuntu0.1 |
| upstream | released | 1.6.42-1 |
Показывать по
EPSS
8.1 High
CVSS3
Связанные уязвимости
In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.
In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.
In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.
In memcached before 1.6.42, password data for SASL password database a ...
In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.
EPSS
8.1 High
CVSS3