https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 16:12:05 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:27842 <p><strong>Affected:</strong> AlmaLinux:10: memcached, AlmaLinux:10: memcached-selinux</p> <p>memcached is a high-performance, distributed memory object caching system, generic in nature, but intended for use in speeding up dynamic web applications by alleviating database load.</p> <p>Security Fix(es):</p> <p>* memcached: memcached: Username enumeration via timing side channel (CVE-2026-47783)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:10: memcached, AlmaLinux:10: memcached-selinux</p> <p>memcached is a high-performance, distributed memory object caching system, generic in nature, but intended for use in speeding up dynamic web applications by alleviating database load.</p> <p>Security Fix(es):</p> <p>* memcached: memcached: Username enumeration via timing side channel (CVE-2026-47783)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:27842 https://cve.radiocsirt.org/vuln/bit-memcached-2026-47783 <p><strong>Affected:</strong> Bitnami: memcached</p> <p>In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass.</p> <p><strong>Affected:</strong> Bitnami: memcached</p> <p>In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass.</p> https://cve.radiocsirt.org/vuln/bit-memcached-2026-47783 https://cve.radiocsirt.org/vuln/euvd-2026-371796 EUVD-2026-371796 https://cve.radiocsirt.org/vuln/euvd-2026-371796 https://cve.radiocsirt.org/vuln/fkie_cve-2026-47783 <p>In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass.</p> <p>In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-47783 https://cve.radiocsirt.org/vuln/ghsa-qjpx-j6j4-8xpr <p>In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass.</p> <p>In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass.</p> https://cve.radiocsirt.org/vuln/ghsa-qjpx-j6j4-8xpr https://cve.radiocsirt.org/vuln/msrc_cve-2026-47783 msrc_CVE-2026-47783 https://cve.radiocsirt.org/vuln/msrc_cve-2026-47783 https://cve.radiocsirt.org/vuln/oesa-2026-2539 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: memcached, openEuler:24.03-LTS-SP3: memcached, openEuler:20.03-LTS-SP4: memcached, openEuler:22.03-LTS-SP4: memcached, openEuler:24.03-LTS: memcached</p> <p>memcached is a high-performance, distributed memory object caching system, generic in nature, but intended for use in speeding up dynamic web applications by alleviating database load. Security Fix(es):</p> <p>In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass.(CVE-2026-47783)</p> <p>In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.(CVE-2026-47784)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: memcached, openEuler:24.03-LTS-SP3: memcached, openEuler:20.03-LTS-SP4: memcached, openEuler:22.03-LTS-SP4: memcached, openEuler:24.03-LTS: memcached</p> <p>memcached is a high-performance, distributed memory object caching system, generic in nature, but intended for use in speeding up dynamic web applications by alleviating database load. Security Fix(es):</p> <p>In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass.(CVE-2026-47783)</p> <p>In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.(CVE-2026-47784)</p> https://cve.radiocsirt.org/vuln/oesa-2026-2539 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10882-1 <p>memcached-1.6.42-1.1 on GA media</p> <p>memcached-1.6.42-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10882-1 https://cve.radiocsirt.org/vuln/rhsa-2026:63224 <p>memcached: memcached: Username enumeration via timing side channel memcached: memcached: Denial of Service due to out-of-bounds read</p> <p>memcached: memcached: Username enumeration via timing side channel memcached: memcached: Denial of Service due to out-of-bounds read</p> https://cve.radiocsirt.org/vuln/rhsa-2026:63224 https://cve.radiocsirt.org/vuln/rlsa-2026:27842 <p><strong>Affected:</strong> Rocky Linux:10: memcached</p> <p>memcached is a high-performance, distributed memory object caching system, generic in nature, but intended for use in speeding up dynamic web applications by alleviating database load.</p> <p>Security Fix(es):</p> <p>* memcached: memcached: Username enumeration via timing side channel (CVE-2026-47783)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> Rocky Linux:10: memcached</p> <p>memcached is a high-performance, distributed memory object caching system, generic in nature, but intended for use in speeding up dynamic web applications by alleviating database load.</p> <p>Security Fix(es):</p> <p>* memcached: memcached: Username enumeration via timing side channel (CVE-2026-47783)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/rlsa-2026:27842 https://cve.radiocsirt.org/vuln/suse-su-2026:22022-1 <p>Security update for memcached</p> <p>Security update for memcached</p> https://cve.radiocsirt.org/vuln/suse-su-2026:22022-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-47783 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: memcached, Ubuntu:Pro:18.04:LTS: memcached, Ubuntu:20.04:LTS: memcached, Ubuntu:22.04:LTS: memcached, Ubuntu:24.04:LTS: memcached, Ubuntu:25.10: memcached, Ubuntu:26.04:LTS: memcached</p> <p>In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: memcached, Ubuntu:Pro:18.04:LTS: memcached, Ubuntu:20.04:LTS: memcached, Ubuntu:22.04:LTS: memcached, Ubuntu:24.04:LTS: memcached, Ubuntu:25.10: memcached, Ubuntu:26.04:LTS: memcached</p> <p>In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-47783 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1615 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in memcached ausnutzen, um vertrauliche Informationen offenzulegen und die Authentifizierung zu umgehen, was möglicherweise weitere Angriffe ermöglicht.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in memcached ausnutzen, um vertrauliche Informationen offenzulegen und die Authentifizierung zu umgehen, was möglicherweise weitere Angriffe ermöglicht.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1615