CVE-2023-46853 In Memcached before 1.6.22 an off-by-one error exists when processing proxy requests in proxy mode if \n is used instead of \r\n.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Vulnerabilities Discovered in Memcached Prior to Version 1.6.22 Two vulnerabilities have been identified in Memcached versions prior to 1.6.22. CVE-2023-46853 involves an off-by-one error when processing proxy requests using incorrect line endings, while CVE-2023-46852 is a buffer overflow caused by excessive spaces in multiget requests. Both vulnerabilities were published on October 27, 2023. 2 sources 34