Public bug reported:

Memcached is currently involved in some massive ddos attacks, see e.g.:

The UDP protocol of memcached can be abused for very effective DDoS 
amplification attacks and should therefore be considered dangerous.
Upstream memcached has reacted to this by disabling UDP by default:

In Ubuntu memcached by default only listens to, but enables
UDP. While the localhost-only protects default settings, it's still only
a minor change away from creating an effective DDoS tool for a protocol
that is hardly in use today. I recommend that Ubuntu backports the
upstream change and disables UDP by default.

** Affects: memcached (Ubuntu)
     Importance: Undecided
         Status: New

You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

  memcached should disable UDP by default

To manage notifications about this bug go to:

ubuntu-bugs mailing list

Reply via email to