« Volver al listado

CVE-2013-7291

Estado: ModificadaBaja (1.8)—

memcached before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service (crash) via a request that triggers an "unbounded key print" during logging, related to an issue that was "quickly grepped out of the source tree," a different vulnerability than CVE-2013-0179 and CVE-2013-7290.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Memcached — Memcached

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-7291",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 1.8,
          "accessVector": "ADJACENT_NETWORK",
          "vectorString": "AV:A/AC:H/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "HIGH",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.2,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-01-13T21:55:05.277",
  "references": [
    {
      "url": "http://www.securityfocus.com/bid/64989",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://code.google.com/p/memcached/issues/detail?id=306",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://code.google.com/p/memcached/wiki/ReleaseNotes1417",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/64989",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://code.google.com/p/memcached/issues/detail?id=306",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://code.google.com/p/memcached/wiki/ReleaseNotes1417",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "memcached before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service (crash) via a request that triggers an \"unbounded key print\" during logging, related to an issue that was \"quickly grepped out of the source tree,\" a different vulnerability than CVE-2013-0179 and CVE-2013-7290."
    },
    {
      "lang": "es",
      "value": "memcached anterior a la versión 1.4.17, cuando se ejecuta en modo verboso, permite a atacantes remotos provocar una denegación de servicio (caída) a través de una petición que desencadena una \"unbounded key print\" durante el proceso de inicio de sesión, relacionado con el problema que fue \"excluído rápidamente de la raíz de la fuente\", una vulnerabilidad diferente a CVE-2013-0179 y CVE-2013-7290."
    }
  ],
  "lastModified": "2026-06-17T00:01:40.493",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:memcached:memcached:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5BC2D838-BD98-438F-8B8A-C2C26E129E63",
              "versionEndIncluding": "1.4.16"
            },
            {
              "criteria": "cpe:2.3:a:memcached:memcached:1.4.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9D6D790C-560B-460F-A175-B47A5AFAA9F3"
            },
            {
              "criteria": "cpe:2.3:a:memcached:memcached:1.4.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "358D87E0-9392-4C00-94CE-C14BC408BCF9"
            },
            {
              "criteria": "cpe:2.3:a:memcached:memcached:1.4.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CE58473C-3D01-4519-B1F9-1F1808191EDF"
            },
            {
              "criteria": "cpe:2.3:a:memcached:memcached:1.4.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F45F2A98-7146-4501-B2A7-A376204DCFD2"
            },
            {
              "criteria": "cpe:2.3:a:memcached:memcached:1.4.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C1F4CD0E-CB74-4D72-ABDF-97820DE6A595"
            },
            {
              "criteria": "cpe:2.3:a:memcached:memcached:1.4.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0BC45B91-2C50-4D9A-9D8D-026249FB4B4B"
            },
            {
              "criteria": "cpe:2.3:a:memcached:memcached:1.4.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8FE2B6E7-1066-4D7D-9346-F03487EAE77C"
            },
            {
              "criteria": "cpe:2.3:a:memcached:memcached:1.4.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DC04F90C-2813-44F8-B48D-9EAF6E8B78A6"
            },
            {
              "criteria": "cpe:2.3:a:memcached:memcached:1.4.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1E305092-2CFD-4A94-BCE5-7F9AAEDB74D2"
            },
            {
              "criteria": "cpe:2.3:a:memcached:memcached:1.4.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "924552C6-BF90-49F1-A562-620196503246"
            },
            {
              "criteria": "cpe:2.3:a:memcached:memcached:1.4.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "92EFE814-FA06-487A-8E5F-CD00457334A4"
            },
            {
              "criteria": "cpe:2.3:a:memcached:memcached:1.4.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2AB6AF32-7B4B-4FEB-BE5D-A260852ED0DF"
            },
            {
              "criteria": "cpe:2.3:a:memcached:memcached:1.4.12:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A93A9113-B3AE-4952-9B98-B296DB7580B7"
            },
            {
              "criteria": "cpe:2.3:a:memcached:memcached:1.4.13:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F60CAEF4-EDD2-474D-99AE-AFBDE73BBBCE"
            },
            {
              "criteria": "cpe:2.3:a:memcached:memcached:1.4.14:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "29C9CE6E-6330-4346-8989-2A7DA7BFD19A"
            },
            {
              "criteria": "cpe:2.3:a:memcached:memcached:1.4.15:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "01E082CD-A502-4CD2-8995-2086217205A6"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}