Summary
Daniel Shapira discovered an integer overflow issue in Memcached. A remote
attacker could use this to cause a denial of service (daemon crash).
(CVE-2017-9951)
It was discovered that Memcached listened to UDP by default. A remote
attacker could use this as part of a distributed denial of service attack.
(CVE-2018-1000115)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | memcached | 1.4.14-0ubuntu9.2 |
| Ubuntu · 16.04 LTS 16.04:LTS | memcached | 1.4.25-2ubuntu1.3 |
Vulnerabilities 2
-
Unscored —
The try_read_command function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of se…
-
Unscored —
Memcached version 1.5.5 contains an Insufficient Control of Network Message Volume (Network Amplification, CWE-406) vul…