cnvd - cnvd-2018-04860

cnvd-2018-04860

Vulnerability from cnvd

Title: Memcached拒绝服务漏洞

Description:

Memcached是美国软件开发者布莱德-菲兹派翠克（Brad Fitzpatrick）所研发的一套高性能的分布式内存对象缓存系统。该系统通过在内存中缓存数据和对象来减少读取数据库的次数，从而提高网站访问速度。

Memcached 1.5.5版本中存在安全漏洞，该漏洞源于程序未能充分的限制Network Message Volume。攻击者可利用该漏洞造成拒绝服务。

Severity: 中

Patch Name: Memcached拒绝服务漏洞的补丁

Patch Description:

Memcached 1.5.5版本中存在安全漏洞，该漏洞源于程序未能充分的限制Network Message Volume。攻击者可利用该漏洞造成拒绝服务。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://github.com/memcached/memcached/wiki/ReleaseNotes156

Reference: https://blogs.akamai.com/2018/03/memcached-fueled-13-tbps-attacks.html https://github.com/memcached/memcached/commit/dbb7a8af90054bf4ef51f5814ef7ceb17d83d974 https://www.exploit-db.com/exploits/44264/

Impacted products

Name
Memcached Memcached 1.5.5

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-1000115"
    }
  },
  "description": "Memcached\u662f\u7f8e\u56fd\u8f6f\u4ef6\u5f00\u53d1\u8005\u5e03\u83b1\u5fb7-\u83f2\u5179\u6d3e\u7fe0\u514b\uff08Brad Fitzpatrick\uff09\u6240\u7814\u53d1\u7684\u4e00\u5957\u9ad8\u6027\u80fd\u7684\u5206\u5e03\u5f0f\u5185\u5b58\u5bf9\u8c61\u7f13\u5b58\u7cfb\u7edf\u3002\u8be5\u7cfb\u7edf\u901a\u8fc7\u5728\u5185\u5b58\u4e2d\u7f13\u5b58\u6570\u636e\u548c\u5bf9\u8c61\u6765\u51cf\u5c11\u8bfb\u53d6\u6570\u636e\u5e93\u7684\u6b21\u6570\uff0c\u4ece\u800c\u63d0\u9ad8\u7f51\u7ad9\u8bbf\u95ee\u901f\u5ea6\u3002\r\n\r\nMemcached 1.5.5\u7248\u672c\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u5145\u5206\u7684\u9650\u5236Network Message Volume\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u62d2\u7edd\u670d\u52a1\u3002",
  "discovererName": "anonymous",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://github.com/memcached/memcached/wiki/ReleaseNotes156",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-04860",
  "openTime": "2018-03-12",
  "patchDescription": "Memcached\u662f\u7f8e\u56fd\u8f6f\u4ef6\u5f00\u53d1\u8005\u5e03\u83b1\u5fb7-\u83f2\u5179\u6d3e\u7fe0\u514b\uff08Brad Fitzpatrick\uff09\u6240\u7814\u53d1\u7684\u4e00\u5957\u9ad8\u6027\u80fd\u7684\u5206\u5e03\u5f0f\u5185\u5b58\u5bf9\u8c61\u7f13\u5b58\u7cfb\u7edf\u3002\u8be5\u7cfb\u7edf\u901a\u8fc7\u5728\u5185\u5b58\u4e2d\u7f13\u5b58\u6570\u636e\u548c\u5bf9\u8c61\u6765\u51cf\u5c11\u8bfb\u53d6\u6570\u636e\u5e93\u7684\u6b21\u6570\uff0c\u4ece\u800c\u63d0\u9ad8\u7f51\u7ad9\u8bbf\u95ee\u901f\u5ea6\u3002\r\n\r\nMemcached 1.5.5\u7248\u672c\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u5145\u5206\u7684\u9650\u5236Network Message Volume\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u62d2\u7edd\u670d\u52a1\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Memcached\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Memcached Memcached 1.5.5"
  },
  "referenceLink": "https://blogs.akamai.com/2018/03/memcached-fueled-13-tbps-attacks.html\r\nhttps://github.com/memcached/memcached/commit/dbb7a8af90054bf4ef51f5814ef7ceb17d83d974\r\nhttps://www.exploit-db.com/exploits/44264/",
  "serverity": "\u4e2d",
  "submitTime": "2018-03-07",
  "title": "Memcached\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e"
}

CVE-2018-1000115 (GCVE-0-2018-1000115)

Vulnerability from cvelistv5

Published

2018-03-05 14:00

Modified

2024-08-05 12:33

Severity ?

CWE

Summary

Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network Amplification, CWE-406) vulnerability in the UDP support of the memcached server that can result in denial of service via network flood (traffic amplification of 1:50,000 has been reported by reliable sources). This attack appear to be exploitable via network connectivity to port 11211 UDP. This vulnerability appears to have been fixed in 1.5.6 due to the disabling of the UDP protocol by default.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHBA-2018:2140	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:1593	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/3588-1/	vendor-advisory, x_refsource_UBUNTU
	https://github.com/memcached/memcached/wiki/ReleaseNotes156	x_refsource_MISC
	https://www.exploit-db.com/exploits/44264/	exploit, x_refsource_EXPLOIT-DB
	https://twitter.com/dormando/status/968579781729009664	x_refsource_MISC
	https://www.exploit-db.com/exploits/44265/	exploit, x_refsource_EXPLOIT-DB
	https://github.com/memcached/memcached/commit/dbb7a8af90054bf4ef51f5814ef7ceb17d83d974	x_refsource_MISC
	https://access.redhat.com/errata/RHSA-2018:2857	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:1627	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:2331	vendor-advisory, x_refsource_REDHAT
	https://www.debian.org/security/2018/dsa-4218	vendor-advisory, x_refsource_DEBIAN
	https://blogs.akamai.com/2018/03/memcached-fueled-13-tbps-attacks.html	x_refsource_MISC
	https://github.com/memcached/memcached/issues/348	x_refsource_MISC
	https://www.synology.com/support/security/Synology_SA_18_07	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T12:33:49.333Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHBA-2018:2140",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHBA-2018:2140"
          },
          {
            "name": "RHSA-2018:1593",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1593"
          },
          {
            "name": "USN-3588-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/3588-1/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/memcached/memcached/wiki/ReleaseNotes156"
          },
          {
            "name": "44264",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/44264/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://twitter.com/dormando/status/968579781729009664"
          },
          {
            "name": "44265",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/44265/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/memcached/memcached/commit/dbb7a8af90054bf4ef51f5814ef7ceb17d83d974"
          },
          {
            "name": "RHSA-2018:2857",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2857"
          },
          {
            "name": "RHSA-2018:1627",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:1627"
          },
          {
            "name": "RHSA-2018:2331",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2018:2331"
          },
          {
            "name": "DSA-4218",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2018/dsa-4218"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://blogs.akamai.com/2018/03/memcached-fueled-13-tbps-attacks.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/memcached/memcached/issues/348"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.synology.com/support/security/Synology_SA_18_07"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "dateAssigned": "2018-03-02T00:00:00",
      "datePublic": "2018-03-02T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network Amplification, CWE-406) vulnerability in the UDP support of the memcached server that can result in denial of service via network flood (traffic amplification of 1:50,000 has been reported by reliable sources). This attack appear to be exploitable via network connectivity to port 11211 UDP. This vulnerability appears to have been fixed in 1.5.6 due to the disabling of the UDP protocol by default."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-03T09:57:02",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "RHBA-2018:2140",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHBA-2018:2140"
        },
        {
          "name": "RHSA-2018:1593",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1593"
        },
        {
          "name": "USN-3588-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/3588-1/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/memcached/memcached/wiki/ReleaseNotes156"
        },
        {
          "name": "44264",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/44264/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://twitter.com/dormando/status/968579781729009664"
        },
        {
          "name": "44265",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/44265/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/memcached/memcached/commit/dbb7a8af90054bf4ef51f5814ef7ceb17d83d974"
        },
        {
          "name": "RHSA-2018:2857",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2857"
        },
        {
          "name": "RHSA-2018:1627",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:1627"
        },
        {
          "name": "RHSA-2018:2331",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2018:2331"
        },
        {
          "name": "DSA-4218",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2018/dsa-4218"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://blogs.akamai.com/2018/03/memcached-fueled-13-tbps-attacks.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/memcached/memcached/issues/348"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.synology.com/support/security/Synology_SA_18_07"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "DATE_ASSIGNED": "3/2/2018 21:30:48",
          "ID": "CVE-2018-1000115",
          "REQUESTER": "kurt@seifried.org",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network Amplification, CWE-406) vulnerability in the UDP support of the memcached server that can result in denial of service via network flood (traffic amplification of 1:50,000 has been reported by reliable sources). This attack appear to be exploitable via network connectivity to port 11211 UDP. This vulnerability appears to have been fixed in 1.5.6 due to the disabling of the UDP protocol by default."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHBA-2018:2140",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHBA-2018:2140"
            },
            {
              "name": "RHSA-2018:1593",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1593"
            },
            {
              "name": "USN-3588-1",
              "refsource": "UBUNTU",
              "url": "https://usn.ubuntu.com/3588-1/"
            },
            {
              "name": "https://github.com/memcached/memcached/wiki/ReleaseNotes156",
              "refsource": "MISC",
              "url": "https://github.com/memcached/memcached/wiki/ReleaseNotes156"
            },
            {
              "name": "44264",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/44264/"
            },
            {
              "name": "https://twitter.com/dormando/status/968579781729009664",
              "refsource": "MISC",
              "url": "https://twitter.com/dormando/status/968579781729009664"
            },
            {
              "name": "44265",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/44265/"
            },
            {
              "name": "https://github.com/memcached/memcached/commit/dbb7a8af90054bf4ef51f5814ef7ceb17d83d974",
              "refsource": "MISC",
              "url": "https://github.com/memcached/memcached/commit/dbb7a8af90054bf4ef51f5814ef7ceb17d83d974"
            },
            {
              "name": "RHSA-2018:2857",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2857"
            },
            {
              "name": "RHSA-2018:1627",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:1627"
            },
            {
              "name": "RHSA-2018:2331",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2018:2331"
            },
            {
              "name": "DSA-4218",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2018/dsa-4218"
            },
            {
              "name": "https://blogs.akamai.com/2018/03/memcached-fueled-13-tbps-attacks.html",
              "refsource": "MISC",
              "url": "https://blogs.akamai.com/2018/03/memcached-fueled-13-tbps-attacks.html"
            },
            {
              "name": "https://github.com/memcached/memcached/issues/348",
              "refsource": "MISC",
              "url": "https://github.com/memcached/memcached/issues/348"
            },
            {
              "name": "https://www.synology.com/support/security/Synology_SA_18_07",
              "refsource": "CONFIRM",
              "url": "https://www.synology.com/support/security/Synology_SA_18_07"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-1000115",
    "datePublished": "2018-03-05T14:00:00",
    "dateReserved": "2018-03-05T00:00:00",
    "dateUpdated": "2024-08-05T12:33:49.333Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted