CVE-2016-8706

CVE-2016-8706 is part of multiple integer overflow flaws in memcached affecting the SASL authentication handling. The connected advisories confirm an integer overflow in process_bin_sasl_auth that can cause a heap-based buffer overflow, potentially enabling remote code execution. Affected product...

CVE-2016-8706

An integer overflow in processbinsaslauth function in Memcached, which is responsible for authentication commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution...

CVE-2016-8704

An integer overflow in the processbinappendprepend function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution...

CVE-2016-8704

CVE-2016-8704 describes an integer overflow in memcached’s binary protocol handling, specifically in the function process_bin_append_prepend , which can cause a heap overflow and potentially enable remote code execution. This vulnerability is corroborated by connected advisories from Debian and C...

CVE-2016-8704

An integer overflow in the processbinappendprepend function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution...

CVE-2016-8705

Multiple integer overflows in processbinupdate function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution...

GLSA-201701-12 : memcached: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201701-12 memcached: Multiple vulnerabilities Multiple integer overflow vulnerabilities were discovered in memcached. Please review the CVE identifiers and Cisco TALOS reports referenced below for details. Impact : A remote attack...

memcached: Multiple vulnerabilities

Background memcached is a high-performance, distributed memory object caching system Description Multiple integer overflow vulnerabilities were discovered in memcached. Please review the CVE identifiers and Cisco TALOS reports referenced below for details. Impact A remote attacker could abuse...

Scientific Linux Security Update : memcached on SL7.x x86_64 (20161123)

Security Fixes : - Two integer overflow flaws, leading to heap-based buffer overflows, were found in the memcached binary protocol. An attacker could create a specially crafted message that would cause the memcached server to crash or, potentially, execute arbitrary code. CVE-2016-8704,...

[SECURITY] Fedora 25 Update: memcached-1.4.33-1.fc25

memcached is a high-performance, distributed memory object caching system, generic in nature, but intended for use in speeding up dynamic web applications by alleviating database load...

Memcached process_bin_sasl_auth Integer Underflow (CVE-2016-8706)

An integer underflow vulnerability exists in the Memcached binary protocol. This vulnerability is due to a lack of bounds checking in the processbinsaslauth function. A remote unauthenticated attacker can exploit these vulnerabilities by sending a specially crafted packet to memcached that can le...

Fedora Update for memcached FEDORA-2016-0c4e822340

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 25 : memcached (2016-0c4e822340)

Update to the latest upstream release, which fixes CVE-2016-8704, CVE-2016-8705, CVE-2016-8706. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

Memcached process_bin_append_prepend Integer Overflow (CVE-2016-8704)

An integer overflow vulnerability exists in memcached. This vulnerability is due to a lack of bounds checking in the processbinappendprepend function while processing commands that append or prepend data to existing key-value pairs. A remote unauthenticated attacker can exploit these...

Fedora Update for memcached FEDORA-2016-66c70cadb4

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for memcached FEDORA-2016-4df986a71f

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 6 : memcached (CESA-2016:2820)

An update for memcached is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

CentOS Update for memcached CESA-2016:2820 centos6

Check the version of memcached SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882601";...

Memcached process_bin_update body_len Integer Overflow (CVE-2016-8705)

An integer overflow vulnerability exists in memcached. This vulnerability is due to an integer overflow in the processbinupdate function while processing multiple commands and the bodylen parameter of a Memcached binary protocol packet. A remote unauthenticated attacker can exploit these...

memcached security update

CentOS Errata and Security Advisory CESA-2016:2820 An update for memcached is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...