CVE-2018-1000115 - CVE House
Back to Database
Status published High CVE-2018-1000115

Memcached version 1.5.5 contains an Insufficient Control of Network Message...

Vulnerability Description

Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network Amplification, CWE-406) vulnerability in the UDP support of the memcached server that can result in denial of service via network flood (traffic amplification of 1:50,000 has been reported by reliable sources). This attack appear to be exploitable via network connectivity to port 11211 UDP. This vulnerability appears to have been fixed in 1.5.6 due to the disabling of the UDP protocol by default.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-1000115

Credits & Attribution

No credits recorded in the NVD database.

References

More from memcached

View All →
CVE-2022-48571
memcached 1.6.7 allows a Denial of Service via multi-packet uploads...
High 7.5
CVE-2021-37519
Buffer Overflow vulnerability in authfile.c memcached 1.6.9 allows attackers to...
Unknown 0
CVE-2020-22570
Memcached 1.6.0 before 1.6.3 allows remote attackers to cause a...
High 7.5
CVE-2020-10931
Memcached 1.6.x before 1.6.2 allows remote attackers to cause a...
High 7.5
CVE-2019-15026
memcached 1.5.16, when UNIX sockets are used, has a stack-based...
High 7.5

Affected Vendor

Affected Software

memcached, ubuntu linux, debian linux, openstack
Vulnerable Versions:
1.5.5, 14.04, 16.04, 17.10, 8.0, 9.0, 8, 9, 10, 11, 12

Timeline

Official Publish: March 5th, 2018
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.