CVE-2026-47783
EUVD-2026-3106520.05.2026, 07:16
In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| memcached | memcached | 𝑥 < 1.6.42 |
𝑥
= Vulnerable software versions
Debian Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| memcached |
| ||||||||||||||||||
| memcached-devel |
|
Red Hat Enterprise Linux Releases
Amazon Linux Releases
Amazon Package | |||
|---|---|---|---|
| memcached |
| ||
| memcached-debuginfo |
| ||
| memcached-debugsource |
| ||
| memcached-devel |
| ||
| memcached-selinux |
|
References