CVE-2013-7291
memcached < 1.4.17 - Denial of Service via Unbounded Key Print in Verbose Mode
Title source: llmDescription
memcached before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service (crash) via a request that triggers an "unbounded key print" during logging, related to an issue that was "quickly grepped out of the source tree," a different vulnerability than CVE-2013-0179 and CVE-2013-7290.
References (3)
Core 3
Core References
Patch x_refsource_confirm
https://code.google.com/p/memcached/wiki/ReleaseNotes1417
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/64989
Exploit, Patch x_refsource_confirm
https://code.google.com/p/memcached/issues/detail?id=306
Scores
EPSS
0.0093
EPSS Percentile
56.4%
Details
CWE
CWE-119
Status
published
Products (17)
memcached/memcached
1.4.0
memcached/memcached
1.4.1
memcached/memcached
1.4.2
memcached/memcached
1.4.3
memcached/memcached
1.4.4
memcached/memcached
1.4.5
memcached/memcached
1.4.6
memcached/memcached
1.4.7
memcached/memcached
1.4.8
memcached/memcached
1.4.9
... and 7 more
Published
Jan 13, 2014
Tracked Since
Feb 18, 2026