CVE-2013-7239 Auth bypass in n/a

Medium 4.8 Published 13 Jan 2014 Updated 6 Aug 2024

Remote attackers can bypass SASL authentication in memcached by sending specific invalid and incorrect credential requests, requiring SASL to be enabled.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2013-7239?

CVE-2013-7239 is a medium-severity authentication bypass vulnerability in n/a, published on 13 Jan 2014. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

memcached before 1.4.17 allows remote attackers to bypass authentication by sending an invalid request with SASL credentials, then sending another request with incorrect SASL credentials.

Weakness: CWE-287

Which versions are affected by CVE-2013-7239?

It affects 1 product.

Products include Memcached Memcached.

How do I fix CVE-2013-7239?

Upgrade to a fixed version.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2013-7239 being exploited?

There is no known exploitation of CVE-2013-7239 in the wild and no public exploit code.

Sources

Also known as DEBIAN-CVE-2013-7239, GHSA-v5qw-pp2p-cvpr.