Skip to content
Fencer Vulns
high 7.5

CVE-2018-1000115 in the critical feed json

Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network Amplification, CWE-406) vulnerability in the UD…

published 2018-03-05 8 y ago modified 2026-06-17 4 mo ago also EUVD-2018-1842

cvss
7.5
version 3.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
88.0%
EPSS 88.0% chance of exploitation in 30 days, percentile 99.7%
public exploits
3
Metasploit, Exploit-DB

Summary

Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network Amplification, CWE-406) vulnerability in the UDP support of the memcached server that can result in denial of service via network flood (traffic amplification of 1:50,000 has been reported by reliable sources). This attack appear to be exploitable via network connectivity to port 11211 UDP. This vulnerability appears to have been fixed in 1.5.6 due to the disabling of the UDP protocol by default.

Patch / fix

  • memcached Debian 14, Debian 13, Debian 12 1.5.6-1

debian advisories DEBIAN-CVE-2018-1000115

  • memcached Ubuntu 14.04 LTS 1.4.14-0ubuntu9.2
  • memcached Ubuntu 16.04 LTS 1.4.25-2ubuntu1.3

ubuntu advisories UBUNTU-CVE-2018-1000115

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • instack-undercloud openstack-director 8 2.2.7-13.el7ost
  • openstack-tripleo-heat-templates openstack-director 8 0.8.14-42.el7ost
  • openstack-tripleo-heat-templates-kilo openstack-director 8 0.8.14-42.el7ost
  • puppet-aodh openstack 12 11.4.0-2.el7ost
  • puppet-ceph openstack 12 2.4.2-2.el7ost
  • puppet-heat openstack 12 11.5.0-2.el7ost
  • puppet-nova openstack 12 11.5.0-4.el7ost
  • puppet-panko openstack 12 11.5.0-2.el7ost

red hat advisories RHSA-2018:2857RHSA-2018:2331RHSA-2018:1627RHSA-2018:1593RHBA-2018:2140

  • kibana OpenStack Cloud 7 4.6.3-5.1
  • ansible OpenStack Cloud 7 2.2.3.0-12.2
  • grafana OpenStack Cloud 7 4.6.5-1.14.1
  • memcached OpenStack Cloud 7 1.5.17-3.6.1
  • python-py OpenStack Cloud 7 1.8.1-11.12.1
  • zookeeper OpenStack Cloud 7 3.4.10-6.1
  • crowbar-ha OpenStack Cloud 7 4.0+git.1585316203.d6ad2c8-4.52.4
  • keepalived OpenStack Cloud 7 2.0.19-1.8.1

suse advisories SUSE-RU-2020:2072-1SUSE-SU-2018:1326-1SUSE-SU-2018:1103-1SUSE-RU-2018:1071-1SUSE-SU-2018:0955-1

  • memcached openSUSE Tumbleweed 1.6.9-2.3

opensuse advisories openSUSE-SU-2024:11045-1

  • memcached Alpine 3.5, Alpine 3.4 1.4.33-r2
  • memcached Alpine 3.6 1.4.36-r2

alpine advisories ALPINE-CVE-2018-1000115

Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • memcached Arch Linux 1.5.6-1

arch linux advisories AVG-941

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2018-1000115 updated cvss 5.3

memcached: UDP server support allows spoofed traffic amplification DoS

  • Red Hat Enterprise Linux 6 memcached Red Hat Enterprise Linux 7 memcached Red Hat Enterprise Linux OpenStack Platform 7 (Kilo) memcached Red Hat Mobile Application Platform 4 rhmap-memcached-docker
    affected: workaround, no fix planned “Will not fix”
  • Red Hat OpenStack Platform 8 (Liberty) memcached Red Hat OpenStack Platform 9 (Mitaka) memcached Red Hat OpenStack Platform 13 (Queens) memcached
    affected: workaround, no fix available
  • Red Hat OpenStack 8.0 Director for RHEL 7 instack-undercloud 2.2.7-13.el7ost, openstack-tripleo-heat-templates 0.8.14-42.el7ost, openstack-tripleo-heat-templates-kilo 0.8.14-42.el7ost
    fixed: vendor fix RHSA-2018:2857
  • Red Hat OpenStack 9.0 Director for RHEL 7 instack-undercloud 4.0.0-18.el7ost, openstack-tripleo-heat-templates 2.0.0-65.el7ost, openstack-tripleo-heat-templates-liberty 2.0.0-65.el7ost
    fixed: vendor fix RHBA-2018:2140
  • Red Hat OpenStack Platform 10.0 puppet-tripleo 5.6.8-6.el7ost, openstack-tripleo-heat-templates 5.3.10-1.el7ost
    fixed: vendor fix RHSA-2018:1593
  • Red Hat OpenStack Platform 11.0 puppet-tripleo 6.5.10-3.el7ost, openstack-tripleo-heat-templates 6.2.12-2.el7ost
    fixed: vendor fix RHSA-2018:1627
  • Red Hat OpenStack Platform 12.0 puppet-ceph 2.4.2-2.el7ost, puppet-aodh 11.4.0-2.el7ost, puppet-heat 11.5.0-2.el7ost, puppet-nova 11.5.0-4.el7ost, os-net-config 7.3.6-1.el7ost, puppet-panko 11.5.0-2.el7ost, +21 more
    fixed: vendor fix RHSA-2018:2331
  • Red Hat Enterprise Linux 8 memcached
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Timeline

  1. First public exploit (Metasploit auxiliary/scanner/memcached/memcached_amp)
  2. Published

Exploit prediction

88.00% chance of exploitation in the next 30 days, higher than 99.7% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • Metasploit auxiliary/scanner/memcached/memcached_amp Memcached Stats Amplification Scanner metasploit auxiliary, normal rank, 2018-02-27
  • EDB-44265 Memcached 1.5.5 - 'Memcrashed ' Insufficient Control of Network Message Volume Denial of Service With Shodan API dos, 2018-03-08
  • EDB-44264 Memcached 1.5.5 - 'Memcrashed' Insufficient Control Network Message Volume Denial of Service (1) dos, 2018-03-05

CVSS scores

assigned by version score vector
NVD 3.0 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD 2.0 5.0 AV:N/AC:L/Au:N/C:N/I:N/A:P

Classification

Weakness
  • CWE-400 Uncontrolled Resource Consumption

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.