CVE-2010-1152: Input Validation
Published Apr 12, 2010
·Updated
memcached.c in memcached before 1.4.3 allows remote attackers to cause a denial of service (daemon hang or crash) via a long line that triggers excessive memory allocation. NOTE: some of these details are obtained from third party information.
Affected Software
21 affected components
MemcacheDB Memcached=1.0.0-beta
MemcacheDB Memcached=1.2.1-beta
MemcacheDB Memcached=1.0.4
MemcacheDB Memcached=1.2.8
MemcacheDB Memcached=1.2.2
MemcacheDB Memcached=1.0.3
MemcacheDB Memcached=1.4.1
MemcacheDB Memcached=0.0.3
MemcacheDB Memcached=1.1.0-beta
MemcacheDB Memcached=0.1.1
MemcacheDB Memcached=1.0.1-beta
MemcacheDB Memcached=0.1.0
MemcacheDB Memcached=1.2.0-beta
MemcacheDB Memcached=1.1.12
MemcacheDB Memcached=0.0.2
MemcacheDB Memcached=1.4.0
MemcacheDB Memcached=1.2.0
MemcacheDB Memcached=1.0.2-beta
MemcacheDB Memcached=0.0.4
MemcacheDB Memcached<=1.4.2
MemcacheDB Memcached=0.0.1
Remediation
Patch Available
Patch Available
Patch Available
Event History
Apr 12, 2010
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
via NVD·06:30 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-1152?
CVE-2010-1152 has been designated as a denial of service vulnerability that could lead to daemon hang or crash.
2
How do I fix CVE-2010-1152?
To fix CVE-2010-1152, upgrade to Memcached version 1.4.3 or later.
3
What software versions are affected by CVE-2010-1152?
CVE-2010-1152 affects Memcached versions before 1.4.3, including multiple beta and stable versions.
4
What type of attack does CVE-2010-1152 facilitate?
CVE-2010-1152 enables remote attackers to cause a denial of service through excessive memory allocation.
5
Is CVE-2010-1152 exploitable remotely?
Yes, CVE-2010-1152 can be exploited remotely by sending specially crafted long lines to the Memcached daemon.