CVE-2023-46852 In Memcached before 1.6.22 a buffer overflow exists when processing multiget requests in proxy mode if there are many spaces after the "get" substring.

Api.Msrc.Microsoft • February 18, 2026

Share: View original

Information published.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Vulnerabilities Discovered in Memcached Prior to Version 1.6.22 Two vulnerabilities have been identified in Memcached versions prior to 1.6.22. CVE-2023-46853 involves an off-by-one error when processing proxy requests using incorrect line endings, while CVE-2023-46852 is a buffer overflow caused by excessive spaces in multiget requests. Both vulnerabilities were published on October 27, 2023. 2 sources 34

Extracted Entities

Attack Types (1)

Zero-day Exploit

CVEs (1)

Platforms (1)