CVE-2023-27478

Name: CVE-2023-27478
Creator: NVD / NIST
Published: 2023-03-07T18:15:09.247+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

MEDIUMCVSS 6.5/10EPSS 0.75%

Last modified Jun 17, 2026

CVE-2023-27478 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. libmemcached-awesome is an open source C/C++ client library and tools for the memcached server. `libmemcached` could return data for a previously requested key, if that previous request timed out due to a low `POLL_TIMEOUT`. EPSS estimates a 0.75% chance of exploitation in the next 30 days.

Description

libmemcached-awesome is an open source C/C++ client library and tools for the memcached server. `libmemcached` could return data for a previously requested key, if that previous request timed out due to a low `POLL_TIMEOUT`. This issue has been addressed in version 1.1.4. Users are advised to upgrade. There are several ways to workaround or lower the probability of this bug affecting a given deployment. 1: use a reasonably high `POLL_TIMEOUT` setting, like the default. 2: use separate libmemcached connections for unrelated data. 3: do not re-use libmemcached connections in an unknown state.

Metrics

CVSS 3.1

6.5/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS Probability

0.75%

50.2th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-200

Affected Software

Vendor	Product	Versions
Awesome	Libmemcached	>= 1.0.18, < 1.1.4

References

https://github.com/awesomized/libmemcached/commit/48dcc61aPatch
https://github.com/awesomized/libmemcached/releases/tag/1.1.4Release Notes
https://github.com/awesomized/libmemcached/security/advisories/GHSA-wwmh-39wj-fx59Patch, Third Party Advisory
https://github.com/php-memcached-dev/php-memcached/issues/531Exploit, Issue Tracking, Patch, Third Party Advisory
https://github.com/awesomized/libmemcached/commit/48dcc61aPatch
https://github.com/awesomized/libmemcached/releases/tag/1.1.4Release Notes
https://github.com/awesomized/libmemcached/security/advisories/GHSA-wwmh-39wj-fx59Patch, Third Party Advisory
https://github.com/php-memcached-dev/php-memcached/issues/531Exploit, Issue Tracking, Patch, Third Party Advisory

Timeline

Published: Mar 7, 2023
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2023-27478?

How severe is CVE-2023-27478?

CVE-2023-27478 has a CVSS score of 6.5/10 (MEDIUM severity). The EPSS model estimates a 0.75% probability of exploitation in the next 30 days.

How do I fix CVE-2023-27478?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2023-27478?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST