cve 2023 46852

CVE-2023-46852 is a buffer-overflow vulnerability in Memcached that affects instances running in proxy mode. The flaw is triggered by malformed multiget requests containing many spaces after the "get" token, which can overflow internal buffers. This can lead to denial of service by crashing cache processes, and in specific memory layouts, potential code execution. The vulnerability was fixed upstream in Memcached version 1.6.22. The real-world risk depends on whether the deployed package has the proxy subsystem enabled and if that proxy mode is accessible from untrusted networks. Discussions on WindowsForum.com cover the technical details, impact, and mitigation steps for CVE-2023-46852.