CVE-2013-7291: Buffer Overflow
Published Jan 13, 2014
·Updated
memcached before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service (crash) via a request that triggers an "unbounded key print" during logging, related to an issue that was "quickly grepped out of the source tree," a different vulnerability than CVE-2013-0179 and CVE-2013-7290.
Affected Software
17 affected components
Memcached Memcached<=1.4.16
Memcached Memcached=1.4.0
Memcached Memcached=1.4.1
Memcached Memcached=1.4.2
Memcached Memcached=1.4.3
Memcached Memcached=1.4.4
Memcached Memcached=1.4.5
Memcached Memcached=1.4.6
Memcached Memcached=1.4.7
Memcached Memcached=1.4.8
Memcached Memcached=1.4.9
Memcached Memcached=1.4.10
Memcached Memcached=1.4.11
Memcached Memcached=1.4.12
Memcached Memcached=1.4.13
Memcached Memcached=1.4.14
Memcached Memcached=1.4.15
Remediation
Patch Available
Patch Available
Event History
Jan 13, 2014
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Data Sourced
via NVD·09:55 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-7291?
CVE-2013-7291 has a medium severity level due to its potential to cause denial of service.
2
How do I fix CVE-2013-7291?
To mitigate CVE-2013-7291, upgrade your Memcached installation to version 1.4.17 or later.
3
What are the affected versions of Memcached for CVE-2013-7291?
The affected versions of Memcached for CVE-2013-7291 are all versions prior to 1.4.17.
4
What type of vulnerability is CVE-2013-7291?
CVE-2013-7291 is classified as a denial of service vulnerability.
5
Can CVE-2013-7291 be exploited remotely?
Yes, CVE-2013-7291 can be exploited remotely through crafted requests in verbose mode.