In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by sasl_server_userdb_checkpass.
1.5.10-0ubuntu31.5.10-0ubuntu41.5.19-21.5.20-11.5.22-1ubuntu11.5.22-21.5.22-2ubuntu0.11.5.22-2ubuntu0.21.5.22-2ubuntu0.31.6.12+dfsg-2ubuntu11.6.12+dfsg-31.6.12+dfsg-41.6.13-11.6.14-11.6.14-1ubuntu0.11.6.9+dfsg-1build11.6.21-11.6.22-11.6.23-11.6.24-1build11.6.24-1build31.6.37-11.6.38-11.6.38-1build11.6.38-1build11.6.39-21.6.40-11.4.24-2ubuntu11.4.25-1ubuntu21.4.25-2ubuntu11.4.25-2ubuntu1.21.4.25-2ubuntu1.31.4.25-2ubuntu1.41.4.25-2ubuntu1.51.4.25-2ubuntu1.5+esm11.4.33-1ubuntu31.5.4-1ubuntu21.5.4-1ubuntu31.5.6-0ubuntu11.5.6-0ubuntu1.11.5.6-0ubuntu1.21.5.6-0ubuntu1.2+esm1Exploitability
AV:NAC:HPR:NUI:NScope
S:UImpact
C:HI:HA:HCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H