CVE-2026-47783
🟡 Monitoruj
Błąd w memcached umożliwia atakującemu odczytanie danych użytkownika przez kanał czasowy.
CVSS
8.1
EPSS
1.3%
Exploit
none
Vendor
memcached
Opis źródłowy (NVD)
In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass.
brak
Brak patcha
Źródła i daty
| Źródło | Wartość |
|---|---|
| NVD – CVSS | 8.1 |
| CISA KEV (aktywnie wykorzystywane) | Nie |
| FIRST EPSS (prawdopodobieństwo exploita) | 1.3% |
| Opublikowano (NVD) | 2026-05-20 07:16:15 UTC |
| Ostatnia modyfikacja (NVD) | 2026-09-18 13:18:29 UTC |
Referencje
- https://github.com/memcached/memcached/commit/d13f282b4bce33a9c33b8a1bbf07f12114160fed ([email protected]) [Patch]
- https://github.com/memcached/memcached/compare/1.6.41...1.6.42 ([email protected]) [Release Notes]
- https://github.com/memcached/memcached/wiki/ReleaseNotes1642 ([email protected]) [Release Notes]
- https://access.redhat.com/errata/RHSA-2026:27842 (0b0ca135-0b70-47e7-9f44-1890c2a1c46c)
- https://access.redhat.com/errata/RHSA-2026:27862 (0b0ca135-0b70-47e7-9f44-1890c2a1c46c)
- https://access.redhat.com/security/cve/CVE-2026-47783 (0b0ca135-0b70-47e7-9f44-1890c2a1c46c)
- https://bugzilla.redhat.com/show_bug.cgi?id=2480089 (0b0ca135-0b70-47e7-9f44-1890c2a1c46c)
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-47783.json (0b0ca135-0b70-47e7-9f44-1890c2a1c46c)