Summary
[0:1.4.15-10.el7_3.1]
- fix vulnerabilities allowing remote code execution (CVE-2016-8704,
CVE-2016-8705, CVE-2016-8706)
[0:1.4.15-10]
- fix binding to IPv6 address (#1298603)
- enable SASL support (#1263696)
- don't allow authentication with bad SASL credentials (CVE-2013-7239)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | memcached | 0:1.4.15-10.el7_3.1 |
| Oracle Linux · 7 | memcached-devel | 0:1.4.15-10.el7_3.1 |
Vulnerabilities 3
-
Critical 9.8CVE-2016-8704 EPSS 23%
An integer overflow in the process_bin_append_prepend function in Memcached, which is responsible for processing multip…
-
Critical 9.8CVE-2016-8705 EPSS 20%
Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing multiple co…
-
High 8.1
An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of…