CVE-2018-1000127: canonical ubuntu_linux Integer Overflow or Wraparound
Vulnerability summary
CVE-2018-1000127 is a high (CVSS 7.5) Integer Overflow or Wraparound vulnerability in canonical ubuntu_linux. EPSS estimates a 2.27% chance of exploitation in the next 30 days, higher than 83% of scored vulnerabilities.
Severe, CVSS 7.5 (NVD); no exploitation reported by the 5 checked sources; EPSS 2% (FIRST, 03-11-2026)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 2 · Related 1Timeline
- 13-03-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
memcached version prior to 1.4.37 contains an Integer Overflow vulnerability in items.c:item_free() that can result in data corruption and deadlocks due to items existing in hash table being reused from free list. This attack appear to be exploitable via network connectivity to the memcached service. This vulnerability appears to have been fixed in 1.4.37 and later.
CVSS metrics
5 scores · 4 sources · 2 versions- OSV · Red hatEcosystem advisory · calculated6.5MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:LDiffers
- OSV · UbuntuEcosystem advisory · calculated7.5HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated7.5HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
2.27%
Chance of exploitation in the next 30 days
Percentile
83%
Versus all other CVEs
30-day change
No change 0.00 pp
From 2.27% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-190Integer Overflow or WraparoundThe product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
- CWE-667Improper LockingThe product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.
Affected systems
Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Redhat3 products
- openstack10
- memcached< 0:1.4.39-2.el7ost
- memcached-debuginfo< 0:1.4.39-2.el7ost
Debian2 products
- memcached< 1.4.13-0.2+deb7u4 | < 1.5.0-1
- debian_linuxEOL7.0 | 8.0 | 9.0
Canonical1 product
- ubuntu_linuxEOL14.04 | 16.04 | 17.10
Memcached1 product
- memcached< 1.4.37
Ubuntu1 product
- memcached< 1.4.14-0ubuntu9.3 | < 1.4.25-2ubuntu1.4
5 vendors · 8 products
References
16 links- access.redhat.com/errata/RHSA-2018:2290Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
lists.debian.org/debian-lts-announce/2018/03/msg00031.htmlMailing ListX Refsource MLISTThird Party Advisory- github.com/memcached/memcached/commit/a8c4a82787b8b6c256d61bd5c42fb7f92d1bae00X Refsource CONFIRMPatchThird Party Advisory
- github.com/memcached/memcached/wiki/ReleaseNotes1437X Refsource CONFIRMRelease NotesThird Party AdvisoryREPORT
