CVE-2021-37519: 
Memcached vulnerability analysis and mitigation

CVE-2021-37519 is a Buffer Overflow vulnerability discovered in memcached version 1.6.9. The vulnerability exists in the authfile.c component and allows attackers to cause a denial of service through a crafted authentication file (CVE, NVD).

The vulnerability is a heap buffer overflow that occurs in the authfile.c component when processing the authentication file. The issue arises when reading the --auth-file parameter, where insufficient buffer allocation can lead to a heap buffer overflow. The vulnerability has been assigned a CVSS v3.1 base score of 5.5 (Medium), with attack vector being Local, attack complexity Low, requiring no privileges but user interaction (Ubuntu).

The primary impact of this vulnerability is the potential for denial of service attacks. When successfully exploited, an attacker could cause the memcached service to crash through a specially crafted authentication file (Debian).

The vulnerability was fixed in memcached version 1.6.10 through a patch that allocates an extra byte for reading the last entry when there is no newline at the end of the file and adds additional checks for null bytes when reading the last entry (GitHub PR).