Memcached vulnerabilities
We track 3 vulnerabilities in Memcached products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on May 20, 2026.
3vulnerabilities
0critical
3high
0exploited
7.9average CVSS score
Latest Memcached vulnerabilities
- 8.1 High severity
memcached: Observable Timing Discrepancy
In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.
- 8.1 High severity
memcached: Observable Timing Discrepancy
In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass.
- 7.5 High severity
memcached: Buffer Copy without Checking Size of Input
In Memcached before 1.6.22, a buffer overflow exists when processing multiget requests in proxy mode, if there are many spaces after the "get" substring.