Summary
Aleksandar Nikolic discovered that Memcached incorrectly handled certain
malformed commands. A remote attacker could use this issue to cause
Memcached to crash, resulting in a denial of service, or possibly execute
arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | memcached | 1.4.14-0ubuntu9.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | memcached | 1.4.25-2ubuntu1.2 |
Vulnerabilities 3
-
Critical 9.8CVE-2016-8704 EPSS 23%
An integer overflow in the process_bin_append_prepend function in Memcached, which is responsible for processing multip…
-
Critical 9.8CVE-2016-8705 EPSS 20%
Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing multiple co…
-
High 8.1
An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of…