Red Hat Security AdvisoryRHSA-2016:2819
memcached security update
Released 2016-11-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) memcached-1.4.15-10.el7_3.1, memcached-devel-1.4.15-10.el7_3.1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) memcached-1.4.15-10.el7_3.1, memcached-devel-1.4.15-10.el7_3.1
- Red Hat Enterprise Linux Server (v. 7) memcached-1.4.15-10.el7_3.1
- Red Hat Enterprise Linux Server Optional (v. 7) memcached-devel-1.4.15-10.el7_3.1, memcached-devel-1.4.15-10.el7_3.1.ppc
- Red Hat Enterprise Linux Workstation (v. 7) memcached-1.4.15-10.el7_3.1
- Red Hat Enterprise Linux Workstation Optional (v. 7) memcached-devel-1.4.15-10.el7_3.1
Fixes 3 records
Priority HIGH 65
An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.
CVSS 3.0HIGH 8.1· Network · No auth · No interaction · EPSS 0.45703 · Published 2017-01-06 · Partial fix CWE-190
Priority MEDIUM 62
An integer overflow in the process_bin_append_prepend function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote cod…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.23173 · Published 2017-01-06 · Partial fix CWE-190
Priority MEDIUM 61
Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code exe…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.19854 · Published 2017-01-06 · Partial fix CWE-190
THREATIST.IORead the docs