CVE-2011-4971 Integer overflow in n/a

What is CVE-2011-4971?

CVE-2011-4971 is a medium-severity vulnerability in n/a, published on 12 Dec 2013. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Multiple integer signedness errors in the (1) process_bin_sasl_auth, (2) process_bin_complete_sasl_auth, (3) process_bin_update, and (4) process_bin_append_prepend functions in Memcached 1.4.5 and earlier allow remote attackers to cause a denial of service (crash) via a large body length value in a packet.

Weakness: CWE-189

Which versions are affected by CVE-2011-4971?

It affects 1 product.

Products include Memcached Memcached.

How do I fix CVE-2011-4971?

Upgrade to a fixed version.

Is CVE-2011-4971 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2011-4971 exists.

Public exploit code: 1 Metasploit module.

Other vulnerabilities in n/a

• CVE-2023-46853 Memory corruption in n/a Critical 9.8
• CVE-2016-8704 Integer overflow in Memcached Critical 9.8
• CVE-2016-8705 Integer overflow in Memcached Critical 9.8
• CVE-2026-47783 Information disclosure in memcached High 8.1
• CVE-2026-47784 Information disclosure in memcached High 8.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as CVE-2013-2026, DEBIAN-CVE-2011-4971, GHSA-pj3v-4mjw-vvpv, MGASA-2013-0339.