ИнструментыУязвимости БДУБлоклистыРасширениеУтилитыБлогAPIМониторинг
Главная → Уязвимости → CVE-2026-47784
8.1высокая

CVE-2026-47784

Описание

In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.

Затрагиваемое ПО
Memcached Memcached
CVSS
Балл8.1 — высокая
ВекторCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Источники
https://github.com/memcached/memcached/commit/d13f282b4bce33a9c33b8a1bbf07f12114160fedhttps://github.com/memcached/memcached/compare/1.6.41...1.6.42https://github.com/memcached/memcached/wiki/ReleaseNotes1642