The process_stat function in (1) Memcached prior to 1.2.8 and (2) MemcacheDB 1.2.0 discloses (a) the contents of /proc/self/maps in response to a stats maps command and (b) memory-allocation statistics in response to a stats malloc command, which allows remote malicious users to obtain sensitive information such as the locations of memory regions, and defeat ASLR protection, by sending a command to the daemon's TCP port.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
memcachedb memcached 1.1.0 |
||
memcachedb memcached 1.0.4 |
||
memcachedb memcached 0.0.3 |
||
memcachedb memcached 0.0.2 |
||
memcachedb memcached 1.0.3 |
||
memcachedb memcached 1.0.2 |
||
memcachedb memcached 0.0.1 |
||
memcachedb memcached 1.2.1 |
||
memcachedb memcached 1.2.0 |
||
memcachedb memcached 0.1.1 |
||
memcachedb memcached 0.1.0 |
||
memcachedb memcached 0.0.4 |
||
memcachedb memcached 1.0.1 |
||
memcachedb memcached 1.0.0 |
||
memcachedb memcached |
Vulmon