Memdrop: memcached pre-auth remote DoS via zero-length asciiauth token
Memdrop is a pre-auth remote denial-of-service issue in memcached 1.6.41 through 1.6.43 when started with -Y.
\n\n\nlen = 0SIGSEGVProtectiv is a cybersecurity company researching vulnerabilities, attack behavior, and exposed systems. We publish what we learn and build focused products around the problems we keep encountering.
Vulnerabilities and attack activity
Quezon City, Philippines
Security research and applied engineering
Protectiv Research
We test what we observe, isolate the cause, and share the technical details that help others understand and respond.
Browse all researchMemdrop is a pre-auth remote denial-of-service issue in memcached 1.6.41 through 1.6.43 when started with -Y.
\n\n\nlen = 0SIGSEGVWhat we investigate
Finding and documenting failure conditions in software, protocols, and exposed services.
Studying the systems, identities, and infrastructure behind phishing, fraud, and online abuse.
Investigating how modern application surfaces expose behavior, data, and unintended access.
Developing methods for connecting fragmented online evidence into useful investigative context.
Research method
A disciplined path from an unusual signal to a finding that other technical teams can inspect and use.
Start with behavior in a real system.
Reproduce the condition and isolate its cause.
Confirm impact and remove unsupported assumptions.
Coordinate responsibly when a third party is affected.
Share the finding, method, and practical lessons.
The company
Protectiv is a cybersecurity company based in Quezon City. We combine security research, digital investigations, and product engineering to understand real problems and build practical ways to address them.
Operating from the Philippines keeps us close to fast-moving fraud, abuse, and investigation problems. We turn those observations into technical research that is useful well beyond any one geography.
More about ProtectivThe people responsible for the company, its research, and the systems built from it.
Built from the work
When a security problem is operational and repeatable, we may build focused infrastructure around it.
Research · Disclosure · Collaboration
Contact Protectiv about a security finding, research collaboration, press request, procurement, or company enquiry.