Two memcached heap buffer overflows — default-config LRU-crawler metadump + proxy backend-response length truncation (→ RCE). Responsibly disclosed and fixed in memcached 1.6.44. PoCs, ASAN evidence, reproduction & fix-validation.
By chatting or signing in you agree to the Terms and chat-message logging (revocable in History).