High severity7.5NVD Advisory· Published Mar 24, 2020· Updated Jun 17, 2026

CVE-2020-10931

Description

Memcached 1.6.x before 1.6.2 allows remote attackers to cause a denial of service (daemon crash) via a crafted binary protocol header to try_read_command_binary in memcached.c.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Memcached/Memcached2 versions
cpe:2.3:a:memcached:memcached:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:memcached:memcached:*:*:*:*:*:*:*:*range: >=1.6.0,<1.6.2
- (no CPE)range: <1.6.2
Memcached/Memcacheddescription
osv-coords2 versions
pkg:bitnami/memcached pkg:rpm/opensuse/memcached&distro=openSUSE%20Tumbleweed
>= 1.6.0, < 1.6.2+ 1 more
- (no CPE)range: >= 1.6.0, < 1.6.2
- (no CPE)range: < 1.6.9-2.3

Patches

Vulnerability mechanics

References

github.com/memcached/memcached/commit/02c6a2b62ddcb6fa4569a591d3461a156a636305nvdPatchThird Party Advisory
github.com/memcached/memcached/issues/629nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.023
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000