Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 905335 (CVE-2023-27478) - <dev-libs/libmemcached-awesome-1.1.4: request confusion
Summary: <dev-libs/libmemcached-awesome-1.1.4: request confusion
Alias: CVE-2023-27478
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal minor (vote)
Assignee: Gentoo Security
Whiteboard: B4 [noglsa]
Keywords: PullRequest
Depends on:
Reported: 2023-04-29 21:11 UTC by John Helmert III
Modified: 2023-10-03 13:30 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Note You need to log in before you can comment on or make changes to this bug.
Description John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2023-04-29 21:11:55 UTC

libmemcached-awesome is an open source C/C++ client library and tools for the memcached server. `libmemcached` could return data for a previously requested key, if that previous request timed out due to a low `POLL_TIMEOUT`. This issue has been addressed in version 1.1.4. Users are advised to upgrade. There are several ways to workaround or lower the probability of this bug affecting a given deployment. 1: use a reasonably high `POLL_TIMEOUT` setting, like the default. 2: use separate libmemcached connections for unrelated data. 3: do not re-use libmemcached connections in an unknown state.
Comment 1 Hans de Graaff gentoo-dev Security 2023-10-03 08:22:19 UTC
Please clean up vulnerable versions 1.1.2 and 1.1.3-r1.
Comment 2 Larry the Git Cow gentoo-dev 2023-10-03 13:28:28 UTC
The bug has been referenced in the following commit(s):

commit f5496a185cac8e593b6dfd3160b310b5d1f39766
Author:     Tomáš Mózes <>
AuthorDate: 2023-10-03 09:20:58 +0000
Commit:     Hans de Graaff <>
CommitDate: 2023-10-03 13:28:15 +0000

    dev-libs/libmemcached-awesome: drop vulnerable
    Signed-off-by: Tomáš Mózes <>
    Signed-off-by: Hans de Graaff <>

 dev-libs/libmemcached-awesome/Manifest             |  2 -
 .../libmemcached-awesome-1.1.2.ebuild              | 46 ---------------------
 .../libmemcached-awesome-1.1.3-r1.ebuild           | 47 ----------------------
 3 files changed, 95 deletions(-)