CVE-2011-4971

Multiple integer signedness errors in the (1) process_bin_sasl_auth, (2) process_bin_complete_sasl_auth, (3) process_bin_update, and (4) process_bin_append_prepend functions in Memcached 1.4.5 and earlier allow remote attackers to cause a denial of service (crash) via a large body length value in a packet.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

22.32% chance of exploitation in the next 30 days, 98th percentile

Published

2013-12-12

Updated

2024-08-07

Proof-of-concept exploits (1)

• secure-rewind-and-discard/sdrad_utils0★ · 2024-04-14

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/misc/memcached.rb

References

• CVE Record
• NVD entry

Related

• CVE-2009-2629
• CVE-2022-3786
• CVE-2011-4969
• CVE-2011-5001
• CVE-2011-4958
• CVE-2011-5002