Vulnerability-Lookup

RHSA-2026:63224

Vulnerability from csaf_redhat - Published: 2026-09-03 15:13 - Updated: 2026-09-21 11:42

Summary

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Severity

Important

Notes

Topic: An update for Red Hat Hardened Images RPMs is now available.

Details: This update includes the following RPMs: memcached: * memcached-1.6.45-1.hum1 (aarch64, x86_64) * memcached-devel-1.6.45-1.hum1 (aarch64, x86_64) * memcached-selinux-1.6.45-1.hum1 (noarch) * memcached-1.6.45-1.hum1.src (src)

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-47783

A flaw was found in memcached. A remote attacker can exploit a timing side channel during Simple Authentication and Security Layer (SASL) password database authentication. This vulnerability allows an attacker to observe subtle timing differences, which could be used to enumerate valid usernames.

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-208 - Observable Timing Discrepancy

Affected products

Fixed 7 products

Product	Version	Remediation
Unresolved product id: Red Hat Hardened Images:memcached-0:1.6.45-1.hum1@aarch64	—	Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:memcached-0:1.6.45-1.hum1@src	—	Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:memcached-0:1.6.45-1.hum1@x86_64	—	Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:memcached-devel-0:1.6.45-1.hum1@aarch64	—	Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:memcached-devel-0:1.6.45-1.hum1@x86_64	—	Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:memcached-selinux-0:1.6.45-1.hum1@noarch@public-hummingbird-aarch64-rpms	—	Vendor Fix fix
Unresolved product id: Red Hat Hardened Images:memcached-selinux-0:1.6.45-1.hum1@noarch@public-hummingbird-x86_64-rpms	—	Vendor Fix fix

Threats

Impact Important

CVE-2026-90698

A flaw was found in memcached. A remote attacker could exploit an out-of-bounds read vulnerability in the `try_read_command_asciiauth` function. This could lead to a Denial of Service (DoS) condition, making the service unavailable to legitimate users.

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-125 - Out-of-bounds Read

Affected products

Fixed 7 products, the same list as for CVE-2026-47783

Threats

Impact Moderate

References

26 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:63224	self
https://images.redhat.com/	external
https://access.redhat.com/security/cve/CVE-2026-90698	external
https://access.redhat.com/security/updates/classi…	external
https://access.redhat.com/security/cve/CVE-2026-47783	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-47783	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480089	external
https://www.cve.org/CVERecord?id=CVE-2026-47783	external
https://nvd.nist.gov/vuln/detail/CVE-2026-47783	external
https://github.com/memcached/memcached/commit/d13…	external
https://github.com/memcached/memcached/compare/1.…	external
https://github.com/memcached/memcached/wiki/Relea…	external
https://access.redhat.com/security/cve/CVE-2026-90698	self
https://bugzilla.redhat.com/show_bug.cgi?id=2532955	external
https://www.cve.org/CVERecord?id=CVE-2026-90698	external
https://nvd.nist.gov/vuln/detail/CVE-2026-90698	external
https://github.com/memcached/memcached/	external
https://github.com/memcached/memcached/commit/af0…	external
https://github.com/memcached/memcached/releases/t…	external
https://protectiv.ph/research/memcached-asciiauth…	external
https://vuldb.com/cve/CVE-2026-90698	external
https://vuldb.com/submit/916217	external
https://vuldb.com/submit/916219	external
https://vuldb.com/vuln/403231	external
https://vuldb.com/vuln/403231/cti	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for Red Hat Hardened Images RPMs is now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "This update includes the following RPMs:\n\nmemcached:\n  * memcached-1.6.45-1.hum1 (aarch64, x86_64)\n  * memcached-devel-1.6.45-1.hum1 (aarch64, x86_64)\n  * memcached-selinux-1.6.45-1.hum1 (noarch)\n  * memcached-1.6.45-1.hum1.src (src)",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:63224",
        "url": "https://access.redhat.com/errata/RHSA-2026:63224"
      },
      {
        "category": "external",
        "summary": "https://images.redhat.com/",
        "url": "https://images.redhat.com/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-90698",
        "url": "https://access.redhat.com/security/cve/CVE-2026-90698"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-47783",
        "url": "https://access.redhat.com/security/cve/CVE-2026-47783"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_63224.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update",
    "tracking": {
      "current_release_date": "2026-09-21T11:42:38+00:00",
      "generator": {
        "date": "2026-09-21T11:42:38+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.0"
        }
      },
      "id": "RHSA-2026:63224",
      "initial_release_date": "2026-09-03T15:13:27+00:00",
      "revision_history": [
        {
          "date": "2026-09-03T15:13:27+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-17T18:49:22+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-21T11:42:38+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Hardened Images",
                "product": {
                  "name": "Red Hat Hardened Images",
                  "product_id": "Red Hat Hardened Images",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:hummingbird:1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Hardened Images"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "memcached-0:1.6.45-1.hum1@aarch64",
                "product": {
                  "name": "memcached-0:1.6.45-1.hum1@aarch64",
                  "product_id": "memcached-0:1.6.45-1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/memcached@1.6.45-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "memcached-devel-0:1.6.45-1.hum1@aarch64",
                "product": {
                  "name": "memcached-devel-0:1.6.45-1.hum1@aarch64",
                  "product_id": "memcached-devel-0:1.6.45-1.hum1@aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/memcached-devel@1.6.45-1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "memcached-0:1.6.45-1.hum1@src",
                "product": {
                  "name": "memcached-0:1.6.45-1.hum1@src",
                  "product_id": "memcached-0:1.6.45-1.hum1@src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/memcached@1.6.45-1.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "memcached-0:1.6.45-1.hum1@x86_64",
                "product": {
                  "name": "memcached-0:1.6.45-1.hum1@x86_64",
                  "product_id": "memcached-0:1.6.45-1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/memcached@1.6.45-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "memcached-devel-0:1.6.45-1.hum1@x86_64",
                "product": {
                  "name": "memcached-devel-0:1.6.45-1.hum1@x86_64",
                  "product_id": "memcached-devel-0:1.6.45-1.hum1@x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/memcached-devel@1.6.45-1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "memcached-selinux-0:1.6.45-1.hum1@noarch@public-hummingbird-aarch64-rpms",
                "product": {
                  "name": "memcached-selinux-0:1.6.45-1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_id": "memcached-selinux-0:1.6.45-1.hum1@noarch@public-hummingbird-aarch64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/memcached-selinux@1.6.45-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "memcached-selinux-0:1.6.45-1.hum1@noarch@public-hummingbird-x86_64-rpms",
                "product": {
                  "name": "memcached-selinux-0:1.6.45-1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_id": "memcached-selinux-0:1.6.45-1.hum1@noarch@public-hummingbird-x86_64-rpms",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/memcached-selinux@1.6.45-1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "memcached-0:1.6.45-1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:memcached-0:1.6.45-1.hum1@aarch64"
        },
        "product_reference": "memcached-0:1.6.45-1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "memcached-0:1.6.45-1.hum1@src as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:memcached-0:1.6.45-1.hum1@src"
        },
        "product_reference": "memcached-0:1.6.45-1.hum1@src",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "memcached-0:1.6.45-1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:memcached-0:1.6.45-1.hum1@x86_64"
        },
        "product_reference": "memcached-0:1.6.45-1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "memcached-devel-0:1.6.45-1.hum1@aarch64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:memcached-devel-0:1.6.45-1.hum1@aarch64"
        },
        "product_reference": "memcached-devel-0:1.6.45-1.hum1@aarch64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "memcached-devel-0:1.6.45-1.hum1@x86_64 as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:memcached-devel-0:1.6.45-1.hum1@x86_64"
        },
        "product_reference": "memcached-devel-0:1.6.45-1.hum1@x86_64",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "memcached-selinux-0:1.6.45-1.hum1@noarch@public-hummingbird-aarch64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:memcached-selinux-0:1.6.45-1.hum1@noarch@public-hummingbird-aarch64-rpms"
        },
        "product_reference": "memcached-selinux-0:1.6.45-1.hum1@noarch@public-hummingbird-aarch64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "memcached-selinux-0:1.6.45-1.hum1@noarch@public-hummingbird-x86_64-rpms as a component of Red Hat Hardened Images",
          "product_id": "Red Hat Hardened Images:memcached-selinux-0:1.6.45-1.hum1@noarch@public-hummingbird-x86_64-rpms"
        },
        "product_reference": "memcached-selinux-0:1.6.45-1.hum1@noarch@public-hummingbird-x86_64-rpms",
        "relates_to_product_reference": "Red Hat Hardened Images"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-47783",
      "cwe": {
        "id": "CWE-208",
        "name": "Observable Timing Discrepancy"
      },
      "discovery_date": "2026-05-20T07:00:55.885466+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480089"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in memcached. A remote attacker can exploit a timing side channel during Simple Authentication and Security Layer (SASL) password database authentication. This vulnerability allows an attacker to observe subtle timing differences, which could be used to enumerate valid usernames.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "memcached: memcached: Username enumeration via timing side channel",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:memcached-0:1.6.45-1.hum1@aarch64",
          "Red Hat Hardened Images:memcached-0:1.6.45-1.hum1@src",
          "Red Hat Hardened Images:memcached-0:1.6.45-1.hum1@x86_64",
          "Red Hat Hardened Images:memcached-devel-0:1.6.45-1.hum1@aarch64",
          "Red Hat Hardened Images:memcached-devel-0:1.6.45-1.hum1@x86_64",
          "Red Hat Hardened Images:memcached-selinux-0:1.6.45-1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:memcached-selinux-0:1.6.45-1.hum1@noarch@public-hummingbird-x86_64-rpms"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-47783"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480089",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480089"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-47783",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-47783"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47783",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47783"
        },
        {
          "category": "external",
          "summary": "https://github.com/memcached/memcached/commit/d13f282b4bce33a9c33b8a1bbf07f12114160fed",
          "url": "https://github.com/memcached/memcached/commit/d13f282b4bce33a9c33b8a1bbf07f12114160fed"
        },
        {
          "category": "external",
          "summary": "https://github.com/memcached/memcached/compare/1.6.41...1.6.42",
          "url": "https://github.com/memcached/memcached/compare/1.6.41...1.6.42"
        },
        {
          "category": "external",
          "summary": "https://github.com/memcached/memcached/wiki/ReleaseNotes1642",
          "url": "https://github.com/memcached/memcached/wiki/ReleaseNotes1642"
        }
      ],
      "release_date": "2026-05-20T05:43:46.976000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-03T15:13:27+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:memcached-0:1.6.45-1.hum1@aarch64",
            "Red Hat Hardened Images:memcached-0:1.6.45-1.hum1@src",
            "Red Hat Hardened Images:memcached-0:1.6.45-1.hum1@x86_64",
            "Red Hat Hardened Images:memcached-devel-0:1.6.45-1.hum1@aarch64",
            "Red Hat Hardened Images:memcached-devel-0:1.6.45-1.hum1@x86_64",
            "Red Hat Hardened Images:memcached-selinux-0:1.6.45-1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:memcached-selinux-0:1.6.45-1.hum1@noarch@public-hummingbird-x86_64-rpms"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:63224"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:memcached-0:1.6.45-1.hum1@aarch64",
            "Red Hat Hardened Images:memcached-0:1.6.45-1.hum1@src",
            "Red Hat Hardened Images:memcached-0:1.6.45-1.hum1@x86_64",
            "Red Hat Hardened Images:memcached-devel-0:1.6.45-1.hum1@aarch64",
            "Red Hat Hardened Images:memcached-devel-0:1.6.45-1.hum1@x86_64",
            "Red Hat Hardened Images:memcached-selinux-0:1.6.45-1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:memcached-selinux-0:1.6.45-1.hum1@noarch@public-hummingbird-x86_64-rpms"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "memcached: memcached: Username enumeration via timing side channel"
    },
    {
      "cve": "CVE-2026-90698",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-09-14T08:50:55.705716+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2532955"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in memcached. A remote attacker could exploit an out-of-bounds read vulnerability in the `try_read_command_asciiauth` function. This could lead to a Denial of Service (DoS) condition, making the service unavailable to legitimate users.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "memcached: memcached: Denial of Service due to out-of-bounds read",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat Hardened Images:memcached-0:1.6.45-1.hum1@aarch64",
          "Red Hat Hardened Images:memcached-0:1.6.45-1.hum1@src",
          "Red Hat Hardened Images:memcached-0:1.6.45-1.hum1@x86_64",
          "Red Hat Hardened Images:memcached-devel-0:1.6.45-1.hum1@aarch64",
          "Red Hat Hardened Images:memcached-devel-0:1.6.45-1.hum1@x86_64",
          "Red Hat Hardened Images:memcached-selinux-0:1.6.45-1.hum1@noarch@public-hummingbird-aarch64-rpms",
          "Red Hat Hardened Images:memcached-selinux-0:1.6.45-1.hum1@noarch@public-hummingbird-x86_64-rpms"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-90698"
        },
        {
          "category": "external",
          "summary": "RHBZ#2532955",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2532955"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-90698",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-90698"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-90698",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-90698"
        },
        {
          "category": "external",
          "summary": "https://github.com/memcached/memcached/",
          "url": "https://github.com/memcached/memcached/"
        },
        {
          "category": "external",
          "summary": "https://github.com/memcached/memcached/commit/af05c9302bba508b736c3da1d5670f63fe8b7db4",
          "url": "https://github.com/memcached/memcached/commit/af05c9302bba508b736c3da1d5670f63fe8b7db4"
        },
        {
          "category": "external",
          "summary": "https://github.com/memcached/memcached/releases/tag/1.6.44",
          "url": "https://github.com/memcached/memcached/releases/tag/1.6.44"
        },
        {
          "category": "external",
          "summary": "https://protectiv.ph/research/memcached-asciiauth-empty-line-dos",
          "url": "https://protectiv.ph/research/memcached-asciiauth-empty-line-dos"
        },
        {
          "category": "external",
          "summary": "https://vuldb.com/cve/CVE-2026-90698",
          "url": "https://vuldb.com/cve/CVE-2026-90698"
        },
        {
          "category": "external",
          "summary": "https://vuldb.com/submit/916217",
          "url": "https://vuldb.com/submit/916217"
        },
        {
          "category": "external",
          "summary": "https://vuldb.com/submit/916219",
          "url": "https://vuldb.com/submit/916219"
        },
        {
          "category": "external",
          "summary": "https://vuldb.com/vuln/403231",
          "url": "https://vuldb.com/vuln/403231"
        },
        {
          "category": "external",
          "summary": "https://vuldb.com/vuln/403231/cti",
          "url": "https://vuldb.com/vuln/403231/cti"
        }
      ],
      "release_date": "2026-09-14T08:30:12.665000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-03T15:13:27+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
          "product_ids": [
            "Red Hat Hardened Images:memcached-0:1.6.45-1.hum1@aarch64",
            "Red Hat Hardened Images:memcached-0:1.6.45-1.hum1@src",
            "Red Hat Hardened Images:memcached-0:1.6.45-1.hum1@x86_64",
            "Red Hat Hardened Images:memcached-devel-0:1.6.45-1.hum1@aarch64",
            "Red Hat Hardened Images:memcached-devel-0:1.6.45-1.hum1@x86_64",
            "Red Hat Hardened Images:memcached-selinux-0:1.6.45-1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:memcached-selinux-0:1.6.45-1.hum1@noarch@public-hummingbird-x86_64-rpms"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:63224"
        },
        {
          "category": "workaround",
          "details": "To reduce exposure, restrict network access to the memcached service. Configure memcached to listen only on trusted interfaces or localhost, preventing remote attackers from reaching the vulnerable component. For example, modify the memcached service configuration to bind to 127.0.0.1 or a specific internal IP address. A service restart is required for changes to take effect and may temporarily impact services utilizing memcached.",
          "product_ids": [
            "Red Hat Hardened Images:memcached-0:1.6.45-1.hum1@aarch64",
            "Red Hat Hardened Images:memcached-0:1.6.45-1.hum1@src",
            "Red Hat Hardened Images:memcached-0:1.6.45-1.hum1@x86_64",
            "Red Hat Hardened Images:memcached-devel-0:1.6.45-1.hum1@aarch64",
            "Red Hat Hardened Images:memcached-devel-0:1.6.45-1.hum1@x86_64",
            "Red Hat Hardened Images:memcached-selinux-0:1.6.45-1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:memcached-selinux-0:1.6.45-1.hum1@noarch@public-hummingbird-x86_64-rpms"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat Hardened Images:memcached-0:1.6.45-1.hum1@aarch64",
            "Red Hat Hardened Images:memcached-0:1.6.45-1.hum1@src",
            "Red Hat Hardened Images:memcached-0:1.6.45-1.hum1@x86_64",
            "Red Hat Hardened Images:memcached-devel-0:1.6.45-1.hum1@aarch64",
            "Red Hat Hardened Images:memcached-devel-0:1.6.45-1.hum1@x86_64",
            "Red Hat Hardened Images:memcached-selinux-0:1.6.45-1.hum1@noarch@public-hummingbird-aarch64-rpms",
            "Red Hat Hardened Images:memcached-selinux-0:1.6.45-1.hum1@noarch@public-hummingbird-x86_64-rpms"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "memcached: memcached: Denial of Service due to out-of-bounds read"
    }
  ]
}

CVE-2026-47783 (GCVE-0-2026-47783)

Vulnerability from cvelistv5 – Published: 2026-05-20 05:43 – Updated: 2026-09-18 12:04

Summary

In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass.

Severity

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-20 12:49 UTC

CWE

CWE-208 - Observable Timing Discrepancy

Assigner

mitre mitre root Scorecard

References

8 references

URL	Tags
https://github.com/memcached/memcached/commit/d13…
https://github.com/memcached/memcached/compare/1.…
https://github.com/memcached/memcached/wiki/Relea…
https://access.redhat.com/security/cve/CVE-2026-47783	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2480089	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:27842	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:27862	vendor-advisoryx_refsource_REDHAT

Impacted products

7 products

Vendor	Product	Version
memcached	memcached	Affected: 0 , < 1.6.42 (semver) cpe:2.3:a:memcached:memcached::::::::
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:1.6.23-7.el10_2.1 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:1.6.9-7.el9_8.1 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Hardened Images	cpe:/a:redhat:hummingbird:1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-47783",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-20T12:49:50.253452Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-20T12:49:58.195Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "memcached",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.23-7.el10_2.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "memcached",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "0:1.6.9-7.el9_8.1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:6"
            ],
            "defaultStatus": "unaffected",
            "packageName": "memcached",
            "product": "Red Hat Enterprise Linux 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:7"
            ],
            "defaultStatus": "unaffected",
            "packageName": "memcached",
            "product": "Red Hat Enterprise Linux 7",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "unaffected",
            "packageName": "memcached",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "memcached",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-05-20T05:43:46.976Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in memcached. A remote attacker can exploit a timing side channel during Simple Authentication and Security Layer (SASL) password database authentication. This vulnerability allows an attacker to observe subtle timing differences, which could be used to enumerate valid usernames."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.1,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-208",
                "description": "Observable Timing Discrepancy",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-18T12:04:50.505Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-47783"
          },
          {
            "name": "RHBZ#2480089",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480089"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-47783.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:27842"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:27862"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:27842: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:27862: Red Hat Enterprise Linux AppStream (v. 9)"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-05-20T07:00:55.885Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-05-20T05:43:46.976Z",
            "value": "Made public."
          }
        ],
        "title": "memcached: memcached: Username enumeration via timing side channel",
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "memcached",
          "vendor": "memcached",
          "versions": [
            {
              "lessThan": "1.6.42",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:memcached:memcached:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "1.6.42",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-208",
              "description": "CWE-208 Observable Timing Discrepancy",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-20T05:43:46.976Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://github.com/memcached/memcached/commit/d13f282b4bce33a9c33b8a1bbf07f12114160fed"
        },
        {
          "url": "https://github.com/memcached/memcached/compare/1.6.41...1.6.42"
        },
        {
          "url": "https://github.com/memcached/memcached/wiki/ReleaseNotes1642"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-47783",
    "datePublished": "2026-05-20T05:43:46.976Z",
    "dateReserved": "2026-05-20T05:43:46.363Z",
    "dateUpdated": "2026-09-18T12:04:50.505Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-90698 (GCVE-0-2026-90698)

Vulnerability from cvelistv5 – Published: 2026-09-14 08:30 – Updated: 2026-09-15 15:55 X_Open Source

Title

memcached mcmc Tokenizer proto_text.c try_read_command_asciiauth out-of-bounds

Summary

A security flaw has been discovered in memcached 1.6.41/1.6.42/1.6.43. This vulnerability affects the function try_read_command_asciiauth of the file proto_text.c of the component mcmc Tokenizer. The manipulation results in out-of-bounds read. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 1.6.44 is able to resolve this issue. The patch is identified as af05c9302bba508b736c3da1d5670f63fe8b7db4. You should upgrade the affected component.

Severity

6.9 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C

5.3 (Medium)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C

SSVC

Exploitation: poc Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-15 15:55 UTC

CWE

CWE-125 - Out-of-Bounds Read
CWE-119 - Memory Corruption

Assigner

VulDB mitre root Scorecard

References

9 references

URL	Tags
https://vuldb.com/vuln/403231	vdb-entrytechnical-description
https://vuldb.com/vuln/403231/cti	signaturepermissions-required
https://vuldb.com/cve/CVE-2026-90698	third-party-advisory
https://vuldb.com/submit/916217	third-party-advisory
https://vuldb.com/submit/916219	third-party-advisory
https://protectiv.ph/research/memcached-asciiauth…	exploit
https://github.com/memcached/memcached/commit/af0…	patch
https://github.com/memcached/memcached/releases/t…	patch
https://github.com/memcached/memcached/	product

Impacted products

1 product

Vendor	Product	Version
n/a	memcached	Affected: 1.6.41 Affected: 1.6.42 Affected: 1.6.43 Unaffected: 1.6.44 cpe:2.3:a:memcached:memcached::::::::

Credits

Ebfe7001d27b27064356271ddfb15d59 (VulDB User)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-90698",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-15T15:55:23.607079Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-15T15:55:39.158Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:memcached:memcached:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "mcmc Tokenizer"
          ],
          "product": "memcached",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "1.6.41"
            },
            {
              "status": "affected",
              "version": "1.6.42"
            },
            {
              "status": "affected",
              "version": "1.6.43"
            },
            {
              "status": "unaffected",
              "version": "1.6.44"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Ebfe7001d27b27064356271ddfb15d59 (VulDB User)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A security flaw has been discovered in memcached 1.6.41/1.6.42/1.6.43. This vulnerability affects the function try_read_command_asciiauth of the file proto_text.c of the component mcmc Tokenizer. The manipulation results in out-of-bounds read. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 1.6.44 is able to resolve this issue. The patch is identified as af05c9302bba508b736c3da1d5670f63fe8b7db4. You should upgrade the affected component."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 5,
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P/E:POC/RL:OF/RC:C",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "Out-of-Bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-119",
              "description": "Memory Corruption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T08:30:12.665Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-403231 | memcached mcmc Tokenizer proto_text.c try_read_command_asciiauth out-of-bounds",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/vuln/403231"
        },
        {
          "name": "VDB-403231 | CTI Indicators (IOB, IOC, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/403231/cti"
        },
        {
          "name": "CVE-2026-90698 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-90698"
        },
        {
          "name": "Submit #916217 | Memcached 1.6.41 through 1.6.43 Out-of-Bounds Read",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/916217"
        },
        {
          "name": "Submit #916219 | Memcached 1.6.41 \u003e 1.6.43 Out-of-Bounds Read (Duplicate)",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/916219"
        },
        {
          "tags": [
            "exploit"
          ],
          "url": "https://protectiv.ph/research/memcached-asciiauth-empty-line-dos"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/memcached/memcached/commit/af05c9302bba508b736c3da1d5670f63fe8b7db4"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/memcached/memcached/releases/tag/1.6.44"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://github.com/memcached/memcached/"
        }
      ],
      "tags": [
        "x_open-source"
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-09-13T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-09-13T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-09-13T07:28:54.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "memcached mcmc Tokenizer proto_text.c try_read_command_asciiauth out-of-bounds",
      "x_generator": [
        "VulDB PVTS v202609"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-90698",
    "datePublished": "2026-09-14T08:30:12.665Z",
    "dateReserved": "2026-09-13T05:23:49.531Z",
    "dateUpdated": "2026-09-15T15:55:39.158Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:63224

CVE-2026-47783 (GCVE-0-2026-47783)

CVE-2026-90698 (GCVE-0-2026-90698)

Tags

Sightings

Nomenclature

Related by attack behaviour