CVE-2018-3767: Critical severity memcached vulnerability
memjs versions <= 1.1.0 allocates and stores buffers on typed input, resulting in DoS and uninitialized memory usage.
Other sources
Versions of memjs prior to 1.2.2 are vulnerable to Denial of Service (DoS). The package fails to sanitize the value option passed to the Buffer constructor, which may allow attackers to pass large values exhausting system resources.
Recommendation
Upgrade to version 1.2.2 or later.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-3767?
CVE-2018-3767 has a high severity rating due to its potential to cause Denial of Service (DoS) attacks.
Which versions are affected by CVE-2018-3767?
CVE-2018-3767 affects memjs versions 1.1.0 and lower.
How do I fix CVE-2018-3767?
To fix CVE-2018-3767, you should upgrade memjs to version 1.2.2 or later.
What type of vulnerability is CVE-2018-3767?
CVE-2018-3767 is classified as a Denial of Service (DoS) vulnerability.
What is the impact of CVE-2018-3767 on applications?
Applications using vulnerable versions of memjs can experience service interruptions and uninitialized memory usage.