CVE-2019-15026

    Dashboard / Vulnerabilities / CVE-2019-15026

    CVE-2019-15026

    Published: 30 Aug 2019Last Modified: 8 Jul 2026

    Summary:

    Details: memcached 1.5.16, when UNIX sockets are used, has a stack-based buffer over-read in conn_to_str in memcached.c.

    References: http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00060.html, https://lists.debian.org/debian-lts-announce/2019/09/msg00006.html, https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EOD422IS2OPXRDID5EKFZHFUHK2BLQGJ/, https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FYGUBOEM5HX4GRMWVEKOJUFICF77ME47/, https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QDBV5OGV3FJDAH4NO4JSXNRWHDGGKWYB/, https://usn.ubuntu.com/4125-1/, https://github.com/memcached/memcached/wiki/ReleaseNotes1517, https://github.com/memcached/memcached/commit/554b56687a19300a75ec24184746b5512580c819

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 78eb7701e0823643d693c1a7a6fd8a0c75db74d8
    Fixed -None

    Affected versions

    1.5.16

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High