Login Request a demo
Unscored severity · published Jan 13, 2014
CVE-2013-7239
memcached before 1.4.17 allows remote attackers to bypass authentication by sending an invalid request with SASL credentials, then sending another request with incorrect SASL…
–
CVSS
1.2%
EPSS
No
On KEV
Description
memcached before 1.4.17 allows remote attackers to bypass authentication by sending an invalid request with SASL credentials, then sending another request with incorrect SASL credentials.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ME
Memcached · Memcached
through 1.4.16; 1.4.0; 1.4.1; 1.4.2; 1.4.3; 1.4.4; +11 more · source: NVD
Affected product
ME
Memcached
Memcached
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-7239
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-7239
seclists.org
http://seclists.org/oss-sec/2013/q4/572
Vendor Advisory
http://secunia.com/advisories/56183
www.debian.org
http://www.debian.org/security/2014/dsa-2832
www.securityfocus.com
http://www.securityfocus.com/bid/64559
www.ubuntu.com
http://www.ubuntu.com/usn/USN-2080-1
Patch
https://code.google.com/p/memcached/wiki/ReleaseNotes1417
More from Memcached
9.8
CVE-2023-46853
In Memcached before 1.6.22, an off-by-one error exists when processing proxy requests in proxy mode, if \n is used instead of \r\n
9.8
CVE-2016-8705
Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause…
9.8
CVE-2016-8704
An integer overflow in the process_bin_append_prepend function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to…
8.1
CVE-2026-47784
In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass
8.1
CVE-2026-47783
In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by…