CVE-2019-11596: Memcached lru Commands NULL Pointer Dereference Vulnerablity – 29th Apr 2019

Preface: In modern smart world, efficiency is the key words. Do we need that?

Background: Memcached is a decentralized cache memory system. Use Memcached can improve database performance. Redis and Memcached are popular today. The reason is that both are the open-source products. And they can boost up database performance. Redis and Memcached are both in-memory data storage systems.

Vulnerability details: A vulnerability in Memcached could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on a targeted system.
The vulnerability exists because the lru mode and lru temp_ttl commands, as implemented in the memcached.c source code file, do not properly perform memory operations, which could result in a NULL pointer dereference memory operation error. NULL pointer dereference erros are common in C/C++ languages. Pointer is a programming language data type that references a location in memory. Once the value of the location is obtained by the pointer, this pointer is considered dereferenced.

Remedy: Remediation at the following links – https://github.com/memcached/memcached/commit/d35334f368817a77a6bd1f33c6a5676b2c402c02

One thought on “CVE-2019-11596: Memcached lru Commands NULL Pointer Dereference Vulnerablity – 29th Apr 2019”

  1. I like the valuable info you provide in your articles. I will bookmark your blog and check again here frequently. I’m quite certain I抣l learn a lot of new stuff right here! Good luck for the next!

Comments are closed.