Cpe:2.3:a:memcached:memcached:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3amemcachedmemcached/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 14 Sep 2026 13:03:21 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgMemcached Denial of Service Vulnerabilitieshttps://feed.craftedsignal.io/briefs/2026-09-memcached-dos/Mon, 14 Sep 2026 13:03:21 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-09-memcached-dos/Memcached versions prior to 1.4.33 are susceptible to remote, unauthenticated denial-of-service attacks due to improper request handling of specific commands.Memcached versions earlier than 1.4.33 contain vulnerabilities (CVE-2016-8704, CVE-2016-8705) that allow an unauthenticated, remote attacker to trigger a denial-of-service condition. These flaws stem from improper input handling during specific memory operations and request processing. By sending specially crafted packets to the memcached service, an attacker can induce resource exhaustion or memory corruption, resulting in an immediate crash of the service. This vulnerability is significant for organizations relying on memcached for high-performance caching in web architectures, as a successful exploit causes immediate service disruption and potential loss of cached data.

Impact

Successful exploitation results in the unavailability of the memcached service. Because memcached is frequently used to offload database

]]>mediumadvisory