PHP-Memcached v2.2.0 and below contains an improper NULL termination which allows attackers to execute CLRF injection. Note: Third parties have disputed this as not affecting PHP-Memcached directly.

The version of php71-pecl-memcached installed on the remote host is prior to 3.2.0-1.4. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1674 advisory.

  - PHP-Memcached v2.2.0 and below contains an improper NULL termination which allows attackers to execute     CLRF injection. (CVE-2022-26635)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of php54-pecl-memcached installed on the remote host is prior to 2.1.0-3.10. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1670 advisory.

  - PHP-Memcached v2.2.0 and below contains an improper NULL termination which allows attackers to execute     CLRF injection. (CVE-2022-26635)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of php55-pecl-memcached installed on the remote host is prior to 2.2.0-5.17. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1671 advisory.

  - PHP-Memcached v2.2.0 and below contains an improper NULL termination which allows attackers to execute     CLRF injection. (CVE-2022-26635)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of php70-pecl-memcached installed on the remote host is prior to 3.2.0-1.3. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1673 advisory.

  - PHP-Memcached v2.2.0 and below contains an improper NULL termination which allows attackers to execute     CLRF injection. (CVE-2022-26635)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of php56-pecl-memcached installed on the remote host is prior to 2.2.0-5.17. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1672 advisory.

  - PHP-Memcached v2.2.0 and below contains an improper NULL termination which allows attackers to execute     CLRF injection. (CVE-2022-26635)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of php-pecl-memcached installed on the remote host is prior to 2.1.0-3.6. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1669 advisory.

  - PHP-Memcached v2.2.0 and below contains an improper NULL termination which allows attackers to execute     CLRF injection. (CVE-2022-26635)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
170553	Amazon Linux AMI : php71-pecl-memcached (ALAS-2023-1674)	Nessus	Amazon Linux Local Security Checks	critical
170552	Amazon Linux AMI : php54-pecl-memcached (ALAS-2023-1670)	Nessus	Amazon Linux Local Security Checks	critical
170550	Amazon Linux AMI : php55-pecl-memcached (ALAS-2023-1671)	Nessus	Amazon Linux Local Security Checks	critical
170546	Amazon Linux AMI : php70-pecl-memcached (ALAS-2023-1673)	Nessus	Amazon Linux Local Security Checks	critical
170540	Amazon Linux AMI : php56-pecl-memcached (ALAS-2023-1672)	Nessus	Amazon Linux Local Security Checks	critical
170528	Amazon Linux AMI : php-pecl-memcached (ALAS-2023-1669)	Nessus	Amazon Linux Local Security Checks	critical

Detections

Analytics

CVE-2022-26635

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical