CVE-2018-1000115

CVE-2018-1000115 describes an Insufficient Control of Network Message Volume (Network Amplification) vulnerability in Memcached version 1.5.5, specifically impacting its UDP support. This flaw allows for denial of service attacks via network flood, with reported amplification factors up to 1:50,000, affecting products like Canonical, Debian, Memcached, and Red Hat. The vulnerability carries a high CVSS score of 7.5, indicating a severe impact. It is easily exploitable over the network (AV:N, AC:L) without requiring user interaction or privileges, leading directly to high availability impact (A:H). While not listed on the CISA KEV catalog, the vulnerability has a high EPSS score (0.82527) and a FAUCET Risk Score of 99/100, suggesting a high likelihood of exploitation. Exploit code is publicly available through Metasploit modules and ExploitDB, and it has garnered significant community discussion and media coverage.