PHP-Memcached v2.2.0 and below contains an improper NULL termination which allows attackers to execute CLRF injection. Note: Third parties have disputed this as not affecting PHP-Memcached directly.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - PHP-Memcached v2.2.0 and below contains an improper NULL termination which allows attackers to execute
    CLRF injection. Note: Third parties have disputed this as not affecting PHP-Memcached directly.
    (CVE-2022-26635)

The version of php71-pecl-memcached installed on the remote host is prior to 3.2.0-1.4. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1674 advisory.

    PHP-Memcached v2.2.0 and below contains an improper NULL termination which allows attackers to execute     CLRF injection. (CVE-2022-26635)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of php54-pecl-memcached installed on the remote host is prior to 2.1.0-3.10. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1670 advisory.

    PHP-Memcached v2.2.0 and below contains an improper NULL termination which allows attackers to execute     CLRF injection. (CVE-2022-26635)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of php55-pecl-memcached installed on the remote host is prior to 2.2.0-5.17. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1671 advisory.

    PHP-Memcached v2.2.0 and below contains an improper NULL termination which allows attackers to execute     CLRF injection. (CVE-2022-26635)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of php70-pecl-memcached installed on the remote host is prior to 3.2.0-1.3. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1673 advisory.

    PHP-Memcached v2.2.0 and below contains an improper NULL termination which allows attackers to execute     CLRF injection. (CVE-2022-26635)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of php56-pecl-memcached installed on the remote host is prior to 2.2.0-5.17. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1672 advisory.

    PHP-Memcached v2.2.0 and below contains an improper NULL termination which allows attackers to execute     CLRF injection. (CVE-2022-26635)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of php-pecl-memcached installed on the remote host is prior to 2.1.0-3.6. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1669 advisory.

    PHP-Memcached v2.2.0 and below contains an improper NULL termination which allows attackers to execute     CLRF injection. (CVE-2022-26635)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
405571	Alpine: memcached: security update to 0	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
405571	Alpine: memcached: security update to 0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical
170553	Amazon Linux AMI : php71-pecl-memcached (ALAS-2023-1674)	Nessus	Amazon Linux Local Security Checks	critical
170552	Amazon Linux AMI : php54-pecl-memcached (ALAS-2023-1670)	Nessus	Amazon Linux Local Security Checks	critical
170550	Amazon Linux AMI : php55-pecl-memcached (ALAS-2023-1671)	Nessus	Amazon Linux Local Security Checks	critical
170546	Amazon Linux AMI : php70-pecl-memcached (ALAS-2023-1673)	Nessus	Amazon Linux Local Security Checks	critical
170540	Amazon Linux AMI : php56-pecl-memcached (ALAS-2023-1672)	Nessus	Amazon Linux Local Security Checks	critical
170528	Amazon Linux AMI : php-pecl-memcached (ALAS-2023-1669)	Nessus	Amazon Linux Local Security Checks	critical

Detections

Analytics

CVE-2022-26635

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical