CVE-2013-7239: Medium severity Memcached Memcached vulnerability
Published Jan 13, 2014
·Updated
memcached before 1.4.17 allows remote attackers to bypass authentication by sending an invalid request with SASL credentials, then sending another request with incorrect SASL credentials.
Affected Software
17 affected components
Memcached Memcached<=1.4.16
Memcached Memcached=1.4.0
Memcached Memcached=1.4.1
Memcached Memcached=1.4.2
Memcached Memcached=1.4.3
Memcached Memcached=1.4.4
Memcached Memcached=1.4.5
Memcached Memcached=1.4.6
Memcached Memcached=1.4.7
Memcached Memcached=1.4.8
Memcached Memcached=1.4.9
Memcached Memcached=1.4.10
Memcached Memcached=1.4.11
Memcached Memcached=1.4.12
Memcached Memcached=1.4.13
Memcached Memcached=1.4.14
Memcached Memcached=1.4.15
Remediation
Patch Available
Event History
Jan 13, 2014
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Data Sourced
via NVD·09:55 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-7239?
The severity of CVE-2013-7239 is considered to be moderate as it allows remote attackers to bypass authentication.
2
How do I fix CVE-2013-7239?
To fix CVE-2013-7239, upgrade Memcached to version 1.4.17 or a later version.
3
Which versions of Memcached are affected by CVE-2013-7239?
CVE-2013-7239 affects all versions of Memcached prior to 1.4.17, including 1.4.0 to 1.4.16.
4
What kind of attack does CVE-2013-7239 facilitate?
CVE-2013-7239 facilitates an authentication bypass attack that can be exploited via specially crafted requests.
5
Is authentication security at risk with CVE-2013-7239?
Yes, CVE-2013-7239 compromises authentication security, enabling unauthorized access to the Memcached server.