This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2019-11596 →

DEBIAN-CVE-2019-11596

In memcached before 1.5.14, a NULL pointer dereference was found in the "lru mode" and "lru temp_ttl" commands. This causes a denial of service when p...

Original description

The description as published by the source.

In memcached before 1.5.14, a NULL pointer dereference was found in the "lru mode" and "lru temp_ttl" commands. This causes a denial of service when parsing crafted lru command messages in process_lru_command in memcached.c.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 memcached

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.6-1.1"}]}]

Debian:13 memcached

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.6-1.1"}]}]

Debian:14 memcached

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.6-1.1"}]}]

References

advisory security-tracker.debian.org