CVE-2022-26635

PHP-Memcached v2.2.0 and below contains an improper NULL termination which allows attackers to execute CLRF injection. Note: Third parties have disputed this as not affecting PHP-Memcached directly.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-04-05

Last modified

2024-08-03

Affected products

• Memcached (Php)

References

• https://github.com/php-memcached-dev/php-memcached/issues/519
• https://xhzeem.me/posts/Php5-memcached-Injection-Bypass/read/