← Packages
memcached
In-memory caching service
- Current
- 1.6.28
- Candidate
- 1.6.45Stale
- License
- BSD-3-Clause
Advisory · 2
Provider matches do not establish RPM applicability. Local patches, bundled dependencies and binary artifacts are not evaluated.
- Summary
- In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass.NVD
- EPSS model date
- 2026-11-10FIRST
- EPSS probability
- 1.26%FIRST
- Vulnerable CPE criteria
- cpe:2.3:a:memcached:memcached:*:*:*:*:*:*:*:*; < 1.6.42NVD
- Aliases
- —NVD
- KEV
- NoCISA
- CVSS_V3
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HNVD
- Summary
- In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.NVD
- EPSS model date
- 2026-11-10FIRST
- EPSS probability
- 0.55%FIRST
- Vulnerable CPE criteria
- cpe:2.3:a:memcached:memcached:*:*:*:*:*:*:*:*; < 1.6.42NVD
- Aliases
- —NVD
- KEV
- NoCISA
- CVSS_V3
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HNVD
Description
Memcached is an in-memory key-value store. It has a small and generic API, and was originally intended for use with dynamic web applications.
Changelog
PR · 2
Checks
| Monitor | Observation | Last checked |
|---|---|---|
Stale Repository refresh: git fetch exited 128 (authentication) | ||
Stale Source last confirmed at 2026-11-10T19:28:57+00:00; repository refresh overdue. | ||
Checked | ||
Checked | ||
Checked Current source cycle 1.6; upstream lifecycle only. | ||
Not configured No reliable monitor identity/configuration. | — | |
Not configured No reliable monitor identity/configuration. | — | |
Checked Current source component only; local patches, build options, bundled dependencies and binary artifacts are not evaluated. | Last attempted | |
Not configured No reliable monitor identity/configuration. | — |