APP: Memcached Commands CVE-2019-11596 DOS
This signature detects attempts to exploit a known vulnerability against Memcached. A successful attack can result in a denial-of-service condition.
Extended Description
In memcached before 1.5.14, a NULL pointer dereference was found in the "lru mode" and "lru temp_ttl" commands. This causes a denial of service when parsing crafted lru command messages in process_lru_command in memcached.c.
Affected Products
Memcached memcached
References
CVE: CVE-2019-11596
Short Name
APP:MISC:MEMCACHED-CMD-DOS
Severity
Major
Recommended
True
Recommended Action
Drop
Category
APP
Keywords
CVE-2019-11596 Commands DOS Memcached
Release Date
06/20/2019
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3590
Port
TCP/11211
False Positive
Unknown
Vendors
Memcached
Canonical
CVSS Score
5.0