Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
APP:MISC:MEMCACHED-CMD-DOS |
|---|---|
Severity |
Major |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
APP |
Keywords |
Memcached Commands CVE-2019-11596 DOS |
Release Date |
2019/06/20 |
Update Number |
3182 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
APP: Memcached Commands CVE-2019-11596 DOS
This signature detects attempts to exploit a known vulnerability against Memcached. A successful attack can result in a denial-of-service condition.
Extended Description
In memcached before 1.5.14, a NULL pointer dereference was found in the "lru mode" and "lru temp_ttl" commands. This causes a denial of service when parsing crafted lru command messages in process_lru_command in memcached.c.
Affected Products
- Canonical ubuntu_linux 18.04
- Canonical ubuntu_linux 18.10
- Canonical ubuntu_linux 19.04
- Memcached memcached 1.2.7
- Memcached memcached 1.2.8
- Memcached memcached 1.4.0
- Memcached memcached 1.4.1
- Memcached memcached 1.4.10
- Memcached memcached 1.4.11
- Memcached memcached 1.4.12
- Memcached memcached 1.4.13
- Memcached memcached 1.4.14
- Memcached memcached 1.4.15
- Memcached memcached 1.4.16
- Memcached memcached 1.4.17
- Memcached memcached 1.4.18
- Memcached memcached 1.4.19
- Memcached memcached 1.4.2
- Memcached memcached 1.4.20
- Memcached memcached 1.4.21
- Memcached memcached 1.4.22
- Memcached memcached 1.4.23
- Memcached memcached 1.4.24
- Memcached memcached 1.4.25
- Memcached memcached 1.4.26
- Memcached memcached 1.4.27
- Memcached memcached 1.4.28
- Memcached memcached 1.4.29
- Memcached memcached 1.4.3
- Memcached memcached 1.4.30
- Memcached memcached 1.4.31
- Memcached memcached 1.4.32
- Memcached memcached 1.4.33
- Memcached memcached 1.4.34
- Memcached memcached 1.4.35
- Memcached memcached 1.4.36
- Memcached memcached 1.4.37
- Memcached memcached 1.4.38
- Memcached memcached 1.4.39
- Memcached memcached 1.4.4
- Memcached memcached 1.4.5
- Memcached memcached 1.4.6
- Memcached memcached 1.4.7
- Memcached memcached 1.4.8
- Memcached memcached 1.4.9
- Memcached memcached 1.5.0
- Memcached memcached 1.5.1
- Memcached memcached 1.5.10
- Memcached memcached 1.5.11
- Memcached memcached 1.5.12
- Memcached memcached 1.5.13
- Memcached memcached 1.5.2
- Memcached memcached 1.5.3
- Memcached memcached 1.5.4
- Memcached memcached 1.5.5
- Memcached memcached 1.5.6
- Memcached memcached 1.5.7
- Memcached memcached 1.5.8
- Memcached memcached 1.5.9
References
- CVE: CVE-2019-11596