libmemcached-awesome is an open source C/C++ client library and tools for the memcached server. `libmemcached` could return data for a previously requested key, if that previous request timed out due to a low `POLL_TIMEOUT`. This issue has been addressed in version 1.1.4. Users are advised to upgrade. There are several ways to workaround or lower the probability of this bug affecting a given deployment. 1: use a reasonably high `POLL_TIMEOUT` setting, like the default. 2: use separate libmemcached connections for unrelated data. 3: do not re-use libmemcached connections in an unknown state.

The version of libmemcached-awesome installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-27478 advisory.

  - libmemcached-awesome is an open source C/C++ client library and tools for the memcached server.
    `libmemcached` could return data for a previously requested key, if that previous request timed out due to     a low `POLL_TIMEOUT`. This issue has been addressed in version 1.1.4. Users are advised to upgrade. There     are several ways to workaround or lower the probability of this bug affecting a given deployment. 1: use a     reasonably high `POLL_TIMEOUT` setting, like the default. 2: use separate libmemcached connections for     unrelated data. 3: do not re-use libmemcached connections in an unknown state. (CVE-2023-27478)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-7da1639d3f advisory.

    **Version  1.1.4** - released 2022-03-06

    * Fix [gh #107](https://github.com/awesomized/libmemcached/issues/107):
      macOS: deprecated sasl API (improve detection of `libsasl2`).
    * Fix [gh #131](https://github.com/awesomized/libmemcached/issues/131):
      Consider renaming tools (add `CLIENT_PREFIX` build option; default: `mem`)
    * Fix [gh #132](https://github.com/awesomized/libmemcached/issues/132):
      Add build of static library (add `BUILD_SHARED_LIBS` build option; default: `ON`).
    * Fix [gh #134](https://github.com/awesomized/libmemcached/issues/134):
      Update client option documentation.
    * Fix [gh #136](https://github.com/awesomized/libmemcached/issues/136):
      `libmemcachedutil` is underlinked (link against libmemcached).
    * Fix  [CVE-2023-27478](https://github.com/awesomized/libmemcached/security/advisories/GHSA-wwmh-39wj-     fx59)       `get` returns random values when lower than default `OPT_POLL_TIMEOUT` is set.




Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-c9bbaadcbf advisory.

    **Version  1.1.4** - released 2022-03-06

    * Fix [gh #107](https://github.com/awesomized/libmemcached/issues/107):
      macOS: deprecated sasl API (improve detection of `libsasl2`).
    * Fix [gh #131](https://github.com/awesomized/libmemcached/issues/131):
      Consider renaming tools (add `CLIENT_PREFIX` build option; default: `mem`)
    * Fix [gh #132](https://github.com/awesomized/libmemcached/issues/132):
      Add build of static library (add `BUILD_SHARED_LIBS` build option; default: `ON`).
    * Fix [gh #134](https://github.com/awesomized/libmemcached/issues/134):
      Update client option documentation.
    * Fix [gh #136](https://github.com/awesomized/libmemcached/issues/136):
      `libmemcachedutil` is underlinked (link against libmemcached).
    * Fix  [CVE-2023-27478](https://github.com/awesomized/libmemcached/security/advisories/GHSA-wwmh-39wj-     fx59)       `get` returns random values when lower than default `OPT_POLL_TIMEOUT` is set.




Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-fd848970c4 advisory.

    **Version  1.1.4** - released 2022-03-06

    * Fix [gh #107](https://github.com/awesomized/libmemcached/issues/107):
      macOS: deprecated sasl API (improve detection of `libsasl2`).
    * Fix [gh #131](https://github.com/awesomized/libmemcached/issues/131):
      Consider renaming tools (add `CLIENT_PREFIX` build option; default: `mem`)
    * Fix [gh #132](https://github.com/awesomized/libmemcached/issues/132):
      Add build of static library (add `BUILD_SHARED_LIBS` build option; default: `ON`).
    * Fix [gh #134](https://github.com/awesomized/libmemcached/issues/134):
      Update client option documentation.
    * Fix [gh #136](https://github.com/awesomized/libmemcached/issues/136):
      `libmemcachedutil` is underlinked (link against libmemcached).
    * Fix  [CVE-2023-27478](https://github.com/awesomized/libmemcached/security/advisories/GHSA-wwmh-39wj-     fx59)       `get` returns random values when lower than default `OPT_POLL_TIMEOUT` is set.




Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
202364	CBL Mariner 2.0 Security Update: libmemcached-awesome (CVE-2023-27478)	Nessus	MarinerOS Local Security Checks	medium
172555	Fedora 36 : libmemcached-awesome (2023-7da1639d3f)	Nessus	Fedora Local Security Checks	medium
172552	Fedora 37 : libmemcached-awesome (2023-c9bbaadcbf)	Nessus	Fedora Local Security Checks	medium
172462	Fedora 38 : libmemcached-awesome (2023-fd848970c4)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2023-27478

medium

Tenable Plugins

medium

medium

medium

medium