TI-2026-61655 CVE-2026-90698 · GHSA-xf89-37qr-gchh
memcached mcmc Tokenizer proto_text.c try_read_command_asciiauth out-of-bounds
Priority HIGH 70
A security flaw has been discovered in memcached 1.6.41/1.6.42/1.6.43.
Red Hat Hardened Images RPMs bug fix and enhancement update
Released 2026-09-03 · Red Hat rating Important · View on Red Hat →
A security flaw has been discovered in memcached 1.6.41/1.6.42/1.6.43.
In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass.