CVE-2019-11596: Canonical Ubuntu Linux

High severity, CVSS 7.5. EPSS: 3% chance of exploitation in the next 30 days.

In memcached before 1.5.14, a NULL pointer dereference was found in the "lru mode" and "lru temp_ttl" commands. This causes a denial of service when parsing crafted lru command messages in process_lru_command in memcached.c.

Affected products

• Canonical Ubuntu Linux: version 18.04 only; version 18.10 only; version 19.04 only
• Memcached Memcached: before 1.5.14 (fixed in 1.5.14)

Published 2019-04-29. Last modified 2026-06-17.