CVE-2023-46853

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Oct 27, 2023
Updated: Nov 7, 2023
CWE ID 193

Summary

CVE-2023-46853 is a vulnerability affecting Memcached versions prior to 1.6.22. It stems from an off-by-one error in the processing of proxy requests in proxy mode. When a user mistakenly utilizes '\\n' instead of the correct line separator '\\r\\n', the software fails to account for this discrepancy, potentially leading to unintended command execution and security compromise.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share