Alerts This Week
Warning Icon 1 905
Alerts This Week
Warning Icon 1 905

Mageia 9 Memcached Important SASL Timing Attack Fix 2026-0203

mageia
Calendar Grey June 12, 2026
Dist Mageia Esm H88
Critical memcached security advisory for Mageia 9 detailing significant timing attacks with CVE-2026-47783 and CVE-2026-47784.
Security update

Summary

Description: CVE-2026-47784 In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass. CVE-2026-47783 In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass.

References

- https://bugs.mageia.org/show_bug.cgi?id=35552

- https://github.com/memcached/memcached/wiki/ReleaseNotes1642

- https://www.cve.org/CVERecord?id=CVE-2026-47783

- https://www.cve.org/CVERecord?id=CVE-2026-47784

Topics%20covered

Topics Covered

security advisory critical timing attack authentication memcached Mageia

Resolution

SRPMS

- 9/core/memcached-1.6.42-1.mga9

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 12 Jun 2026
URL: https://advisories.mageia.org/MGASA-2026-0203.html
Type: security
CVE: CVE-2026-47783, CVE-2026-47784

Topics%20covered

Topics Covered

security advisory critical timing attack authentication memcached Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here