Red Hat Security Advisory

RHSA-2016:2820

memcached security update

Released 2016-11-23 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop Optional (v. 6) memcached-1.4.4-3.el6_8.1, memcached-devel-1.4.4-3.el6_8.1
Red Hat Enterprise Linux HPC Node Optional (v. 6) memcached-1.4.4-3.el6_8.1, memcached-devel-1.4.4-3.el6_8.1
Red Hat Enterprise Linux Server (v. 6) memcached-1.4.4-3.el6_8.1
Red Hat Enterprise Linux Server Optional (v. 6) memcached-devel-1.4.4-3.el6_8.1, memcached-devel-1.4.4-3.el6_8.1.ppc
Red Hat Enterprise Linux Workstation (v. 6) memcached-1.4.4-3.el6_8.1
Red Hat Enterprise Linux Workstation Optional (v. 6) memcached-devel-1.4.4-3.el6_8.1

Fixes 2 records

TI-2016-07162 CVE-2016-8704 · GHSA-5hm6-wpg3-fv45

Integer overflow in Memcached

MEDIUM 62

An integer overflow in the process_bin_append_prepend function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote cod…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.23173 Published 2017-01-06 Partial fix CWE-190

TI-2016-07163 CVE-2016-8705 · GHSA-52x7-vqgq-5mww

Integer overflow in Memcached

MEDIUM 61

Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code exe…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.19854 Published 2017-01-06 Partial fix CWE-190