CVE-2009-1494: Infoleak
The processstat function in Memcached 1.2.8 discloses memory-allocation statistics in response to a stats malloc command, which allows remote attackers to obtain potentially sensitive information by sending this command to the daemon's TCP port.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1494?
CVE-2009-1494 is classified as a medium severity vulnerability due to the potential disclosure of sensitive memory-allocation statistics.
How do I fix CVE-2009-1494?
To fix CVE-2009-1494, upgrade to a newer version of Memcached that does not contain this vulnerability.
What type of attack does CVE-2009-1494 allow?
CVE-2009-1494 allows remote attackers to gain sensitive information by sending specific commands to the Memcached daemon.
Which version of Memcached is affected by CVE-2009-1494?
CVE-2009-1494 specifically affects Memcached version 1.2.8.
What specific information can be disclosed through CVE-2009-1494?
CVE-2009-1494 can disclose memory-allocation statistics that may contain sensitive information about the server's memory usage.