[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fJbltT04NTSDeJCOpOJ3DPgRn2ZJGvkeIPbkjD04GuXA":3,"g5a-risk:CVE-2018-1000127":189},{"success":4,"data":5,"meta":187},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":15,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":74,"references":75,"referencesCount":105,"weaknesses":106,"weaknessesCount":122,"isActivelyExploited":123,"cisaInfo":15,"otxData":15,"relatedBlogPosts":124,"seoMetadata":125,"configurations":150,"relatedVendorCves":185,"notableEvents":186},"CVE-2018-1000127","What is CVE-2018-1000127?","memcached version prior to 1.4.37 contains an Integer Overflow vulnerability in items.c:item_free() that can result in data corruption and deadlocks due to items existing in hash table being reused from free list. This attack appear to be exploitable via network connectivity to the memcached service. This vulnerability appears to have been fixed in 1.4.37 and later.","memcached version prior to 1.4.37 contains an Integer Overflow vulnerability in items.c:item_free() that can result in data corruption and deadlocks due to i...","2018-03-13T21:29:00.477","2020-08-24T17:37:01.14",7.5,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH",3.9,3.6,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":4,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:N\u002FA:P","PARTIAL",5,"MEDIUM",10,2.9,0.02265,[39,39,39,39,39,39,39],"High",[43,47,52,55,58,63,66,69],{"vendor":44,"product":44,"version":45,"criteria":46,"vulnerable":4},"memcached","*","cpe:2.3:a:memcached:memcached:*:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"debian","debian_linux","7.0","cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":53,"criteria":54,"vulnerable":4},"8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":56,"criteria":57,"vulnerable":4},"9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",{"vendor":59,"product":60,"version":61,"criteria":62,"vulnerable":4},"canonical","ubuntu_linux","14.04","cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",{"vendor":59,"product":60,"version":64,"criteria":65,"vulnerable":4},"16.04","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",{"vendor":59,"product":60,"version":67,"criteria":68,"vulnerable":4},"17.10","cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",{"vendor":70,"product":71,"version":72,"criteria":73,"vulnerable":4},"redhat","openstack","10","cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*",8,[76,81,86,89,93,98,102],{"url":77,"source":78,"tags":79},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:2290","Red Hat",[80],"Third Party Advisory",{"url":82,"source":83,"tags":84},"https:\u002F\u002Fgithub.com\u002Fmemcached\u002Fmemcached\u002Fcommit\u002Fa8c4a82787b8b6c256d61bd5c42fb7f92d1bae00","GitHub",[85,80],"Patch",{"url":87,"source":83,"tags":88},"https:\u002F\u002Fgithub.com\u002Fmemcached\u002Fmemcached\u002Fissues\u002F271",[80],{"url":90,"source":83,"tags":91},"https:\u002F\u002Fgithub.com\u002Fmemcached\u002Fmemcached\u002Fwiki\u002FReleaseNotes1437",[92,80],"Release Notes",{"url":94,"source":95,"tags":96},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2018\u002F03\u002Fmsg00031.html","Debian",[97,80],"Mailing List",{"url":99,"source":100,"tags":101},"https:\u002F\u002Fusn.ubuntu.com\u002F3601-1\u002F","Ubuntu",[80],{"url":103,"source":95,"tags":104},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2018\u002Fdsa-4218",[80],7,[107,115],{"id":108,"name":109,"description":110,"extendedDescription":111,"status":112,"abstraction":113,"structure":114},"CWE-190","Integer Overflow or Wraparound","The product performs a calculation that can\n         produce an integer overflow or wraparound when the logic\n         assumes that the resulting value will always be larger than\n         the original value. This occurs when an integer value is\n         incremented to a value that is too large to store in the\n         associated representation. When this occurs, the value may\n         become a very small or negative number.","","Stable","Base","Simple",{"id":116,"name":117,"description":118,"extendedDescription":119,"status":120,"abstraction":121,"structure":114},"CWE-667","Improper Locking","The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.","Locking is a type of synchronization behavior that ensures that multiple independently-operating processes or threads do not interfere with each other when accessing the same resource. All processes\u002Fthreads are expected to follow the same steps for locking. If these steps are not followed precisely - or if no locking is done at all - then another process\u002Fthread could modify the shared resource in a way that is not visible or predictable to the original process.  This can lead to data or memory corruption, denial of service, etc.","Draft","Class",2,false,[],{"title":126,"metaDescription":127,"keywords":128,"canonicalUrl":129,"structuredData":130},"What is CVE-2018-1000127? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-1000127, a high severity cyber security vulnerability from 2018. memcached version prior to 1.4.37 contains an Integer Ove...","CVE-2018-1000127, CVE-2018-1000127 vulnerability, CVE-2018-1000127 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, memcached security, debian security, canonical security, redhat security, memcached vulnerability, debian_linux vulnerability, ubuntu_linux vulnerability, openstack vulnerability","\u002Fwhat-is\u002Fcve-2018-1000127",{"@context":131,"@type":132,"headline":126,"description":127,"datePublished":10,"dateModified":11,"author":133,"publisher":137,"about":141,"mainEntityOfPage":145,"articleSection":148,"keywords":149},"https:\u002F\u002Fschema.org","TechArticle",{"@type":134,"name":135,"url":136},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":134,"name":135,"url":136,"logo":138},{"@type":139,"url":140},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":142,"name":6,"description":143,"additionalType":144},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":146,"@id":147},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-1000127","Cybersecurity","CVE-2018-1000127, CVE-2018-1000127 vulnerability, CVE-2018-1000127 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[151,159,169,179],{"Operator":15,"Negate":15,"Nodes":152},[153],{"Operator":154,"Negate":15,"CPEMatch":155},"OR",[156],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":157,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":158,"VersionEndIncluding":15},"E4A5BA96-D9BA-4630-86D7-2B4B44207510","1.4.37",{"Operator":15,"Negate":15,"Nodes":160},[161],{"Operator":154,"Negate":15,"CPEMatch":162},[163,165,167],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":164,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"16F59A04-14CF-49E2-9973-645477EA09DA",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":166,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":168,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"DEECE5FC-CACF-4496-A3E7-164736409252",{"Operator":15,"Negate":15,"Nodes":170},[171],{"Operator":154,"Negate":15,"CPEMatch":172},[173,175,177],{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":174,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B5A6F2F3-4894-4392-8296-3B8DD2679084",{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":176,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B",{"Vulnerable":4,"Criteria":68,"MatchCriteriaID":178,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"9070C9D8-A14A-467F-8253-33B966C16886",{"Operator":15,"Negate":15,"Nodes":180},[181],{"Operator":154,"Negate":15,"CPEMatch":182},[183],{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":184,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"E722FEF7-58A6-47AD-B1D0-DB0B71B0C7AA",[],[],{"lastModified":11,"cacheTime":188,"version":32},1792367875459,{"score":190,"band":191,"action":192,"scoredAt":193},47,"Medium","Plan remediation","2026-10-16T06:43:34.600304+00:00"]