CVE-2026-47784

High

In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by…

mitre·CWE-208·Published 2026-05-20

CVSS

8.1

EPSS

0.01

KEV

Exploits

cve.orgen

165 chars

In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.

NVDen

165 chars

In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.

En memcached antes de 1.6.42, los datos de contraseña para la autenticación de la base de datos de contraseñas SASL tienen un canal lateral de temporización porque memcmp es utilizado por sasl_server_userdb_checkpass.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	8.1	—	—	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1	Secondary	NVD	8.1	2.2	5.9	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H