Lucene search

K
mageiaGentoo FoundationMGASA-2014-0018
HistoryJan 21, 2014 - 8:14 p.m.

Updated memcached package fixes multiple security vulnerabilities

2014-01-2120:14:47
Gentoo Foundation
advisories.mageia.org
11

4.8 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:P/A:N

0.016 Low

EPSS

Percentile

87.2%

Updated memcached packages fix security vulnerability: It was reported that SASL authentication could be bypassed due to a flaw related to the managment of the SASL authentication state. With a specially crafted request, a remote attacker may be able to authenticate with invalid SASL credentials (CVE-2013-7239). Multiple issues in memcached before 1.4.17 which allow remote attackers to cause a denial of service by sending a request that causes a crash when memcached is running in verbose mode (CVE-2013-0179, CVE-2013-7290, CVE-2013-7291).

OSVersionArchitecturePackageVersionFilename
Mageia3noarchmemcached< 1.4.17-1memcached-1.4.17-1.mga3

4.8 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:P/A:N

0.016 Low

EPSS

Percentile

87.2%