VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 13, 2014· Updated Apr 29, 2026

CVE-2013-7290

CVE-2013-7290

Description

The do_item_get function in items.c in memcached 1.4.4 and other versions before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service (segmentation fault) via a request to delete a key, which does not account for the lack of a null terminator in the key and triggers a buffer over-read when printing to stderr, a different vulnerability than CVE-2013-0179.

Affected products

13
  • Memcached/Memcached13 versions
    cpe:2.3:a:memcached:memcached:1.4.10:*:*:*:*:*:*:*+ 12 more
    • cpe:2.3:a:memcached:memcached:1.4.10:*:*:*:*:*:*:*
    • cpe:2.3:a:memcached:memcached:1.4.11:*:*:*:*:*:*:*
    • cpe:2.3:a:memcached:memcached:1.4.12:*:*:*:*:*:*:*
    • cpe:2.3:a:memcached:memcached:1.4.13:*:*:*:*:*:*:*
    • cpe:2.3:a:memcached:memcached:1.4.14:*:*:*:*:*:*:*
    • cpe:2.3:a:memcached:memcached:1.4.15:*:*:*:*:*:*:*
    • cpe:2.3:a:memcached:memcached:1.4.16:*:*:*:*:*:*:*
    • cpe:2.3:a:memcached:memcached:1.4.4:*:*:*:*:*:*:*
    • cpe:2.3:a:memcached:memcached:1.4.5:*:*:*:*:*:*:*
    • cpe:2.3:a:memcached:memcached:1.4.6:*:*:*:*:*:*:*
    • cpe:2.3:a:memcached:memcached:1.4.7:*:*:*:*:*:*:*
    • cpe:2.3:a:memcached:memcached:1.4.8:*:*:*:*:*:*:*
    • cpe:2.3:a:memcached:memcached:1.4.9:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.