{"id":"CVE-2022-48571","details":"memcached 1.6.7 allows a Denial of Service via multi-packet uploads in UDP.","aliases":["BIT-memcached-2022-48571"],"modified":"2026-08-12T13:33:35.961942Z","published":"2023-08-22T00:00:00Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48571.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48571.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-48571"},{"type":"FIX","url":"https://github.com/memcached/memcached/commit/6b319c8c7a29e9c353dec83dc92f01905f6c8966"},{"type":"ARTICLE","url":"https://lists.debian.org/debian-lts-announce/2023/09/msg00004.html"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/memcached/memcached","events":[{"introduced":"ad8dfd265523e027b042aec59055409a22668c64"},{"fixed":"6b319c8c7a29e9c353dec83dc92f01905f6c8966"}],"database_specific":{"cpe":"cpe:2.3:a:memcached:memcached:1.6.7:*:*:*:*:*:*:*","extracted_events":[{"introduced":"1.6.7"},{"last_affected":"1.6.7"}],"source":["CPE_STRING","REFERENCES"]}}],"versions":["1.6.7"],"database_specific":{"vanir_signatures":[{"target":{"file":"memcached.c","function":"out_string"},"deprecated":false,"digest":{"function_hash":"277595834115750926081168654056959466818","length":743},"id":"CVE-2022-48571-5a84bf62","signature_type":"Function","signature_version":"v1","source":"https://github.com/memcached/memcached/commit/6b319c8c7a29e9c353dec83dc92f01905f6c8966"},{"deprecated":false,"digest":{"line_hashes":["16474155107867817979884601193417341473","304845883741849737249974174878835322495","163116486141553285337800761877515560800","187307495520313252599712949149420848756","157583762118996341008322745022473086232","181568582211640541597876352317543209388","329468026962106054737850338879188633569","311883249388370600519773269147305399811","104214854192785564424340080277292863319","254404948309440207701611086037120258225"],"threshold":0.9},"id":"CVE-2022-48571-c2a6934f","signature_type":"Line","signature_version":"v1","source":"https://github.com/memcached/memcached/commit/6b319c8c7a29e9c353dec83dc92f01905f6c8966","target":{"file":"memcached.c"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/memcached/memcached/commit/6b319c8c7a29e9c353dec83dc92f01905f6c8966","target":{"file":"memcached.c","function":"try_read_udp"},"deprecated":false,"digest":{"function_hash":"305214104561482860577327136158784902875","length":896},"id":"CVE-2022-48571-c52df0a3"}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-48571.json","vanir_signatures_modified":"2026-08-12T13:33:35Z"}}],"schema_version":"1.9.0"}