Unrated severityNVD Advisory· Published Aug 10, 2009· Updated Jun 16, 2026

CVE-2009-2415

Description

Multiple integer overflows in memcached 1.1.12 and 1.2.2 allow remote attackers to execute arbitrary code via vectors involving length attributes that trigger heap-based buffer overflows.

Affected products

Memcached/Memcached3 versions
cpe:2.3:a:memcachedb:memcached:1.1.12:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:memcachedb:memcached:1.1.12:*:*:*:*:*:*:*
- cpe:2.3:a:memcachedb:memcached:1.2.2:*:*:*:*:*:*:*
- (no CPE)range: 1.1.12, 1.2.2

Patches

Vulnerability mechanics

References

osvdb.org/56906nvd
secunia.com/advisories/36133nvd
secunia.com/advisories/37729nvd
security.debian.org/pool/updates/main/m/memcached/memcached_1.1.12-1+etch1.diff.gznvd
security.debian.org/pool/updates/main/m/memcached/memcached_1.2.2-1+lenny1.diff.gznvd
www.debian.org/security/2009/dsa-1853nvd
www.securityfocus.com/bid/35989nvd
www.redhat.com/archives/fedora-package-announce/2009-December/msg00836.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.005
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000