Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The process_stat function in (1) Memcached before 1.2.8 and (2) MemcacheDB 1.2.0 discloses (a) the contents of /proc/self/maps in response to a stats maps command and (b) memory-allocation statistics in response to a stats malloc command, which allows remote attackers to obtain sensitive information such as the locations of memory regions, and defeat ASLR protection, by sending a command to the daemon's TCP port.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Memcached和MemcacheDB stats maps命令信息泄露漏洞
Vulnerability Description
Memcached是美国软件开发者布莱德-菲兹派翠克（Brad Fitzpatrick）所研发的一套高性能的分布式内存对象缓存系统。该系统通过在内存中缓存数据和对象来减少读取数据库的次数，从而提高网站访问速度。 如果远程攻击者连接到了memcached的TCP端口(默认11211)并发布了stats maps命令，Memcached就会直接将/proc/self/maps的输出管道传输给客户端。这可能导致泄漏所分配内存区域的地址。
CVSS Information
N/A
Vulnerability Type
N/A