In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because a loop exits as soon as a valid username is found by sasl_server_userdb_checkpass.

The publication date reported by the vendor.

The vendor changed the advisory after it was first published.

We collected the advisory from the official source.

Our collector saw this advisory during a later source check.