Red Hat Releases Security Guidance for Memcached

Red Hat has released security recommendations to address potential Distributed Denial-of-Service attacks using Memcached.

Threat ID:: CC-2101
Category:
Threat Severity:: Low
Threat Vector:
Published:: 5 March 2018 12:00 AM

Report a cyber attack: call 0300 303 5222 or email [email protected]

This content has been archived

This article no longer conforms to NHS Digital's standards for cyber alerts, and may contain outdated or inaccurate information. Use of this information contained in this page is at your own risk

Summary

Red Hat has released security recommendations to address potential Distributed Denial-of-Service attacks using Memcached.

Affected platforms

The following platforms are known to be affected:

Red Hat Enterprise Linux

Red Hat Enterprise Linux 6
Red Hat Enterprise Linux 7

Threat details

This misconfiguration could allow an attacker to exploit Memcached services as a reflection and amplification vector, causing unexpected volumes of traffic to be sent to targeted systems and networks.

Remediation steps

Type	Step
	Users and administrators are encouraged to review the Red Hat Advisories 3369081 and 1160613 as well as the Information Sharing Portal article DRDoS Amplification Using UDP CC-1834 for further information.

Last edited: 17 February 2020 12:53 pm