CVE-2018-1295

In Apache Ignite 2.3 or earlier, the serialization mechanism does not have a list of classes allowed for serialization/deserialization, which makes it possible to run arbitrary code when 3-rd party vulnerable classes are present in Ignite classpath. The vulnerability can be exploited if the one...

CVE-2018-1295

In Apache Ignite 2.3 or earlier, the serialization mechanism does not have a list of classes allowed for serialization/deserialization, which makes it possible to run arbitrary code when 3-rd party vulnerable classes are present in Ignite classpath. The vulnerability can be exploited if the one...

openSUSE Security Update : memcached (openSUSE-2018-327)

This update for memcached fixes the following issues : - CVE-2017-9951: Fixed heap-based buffer over-read in tryreadcommand function which allowed remote attackers to cause a denial of service attack bsc1056865. This update was imported from the SUSE:SLE-12:Update update project. %NASLMINLEVEL...

Debian: Security Advisory (DLA-1329-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for memcached (openSUSE-SU-2018:0855-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for memcached (important)

This update for memcached fixes the following issues: - CVE-2017-9951: Fixed heap-based buffer over-read in tryreadcommand function which allowed remote attackers to cause a denial of service attack bsc1056865. This update was imported from the SUSE:SLE-12:Update update project...

SUSE SLES12 Security Update : memcached (SUSE-SU-2018:0839-1)

This update for memcached fixes the following issues : - CVE-2017-9951: Fixed heap-based buffer over-read in tryreadcommand function which allowed remote attackers to cause a denial of service attack bsc1056865. Note that Tenable Network Security has extracted the preceding description block...

Debian DLA-1329-1 : memcached security update

memcached version prior to 1.4.37 contains an Integer Overflow vulnerability that can result in data corruption and deadlocks. This attack is exploitable via network connectivity to the memcached service. For Debian 7 'Wheezy', these problems have been fixed in version 1.4.13-0.2+deb7u4. We...

[SECURITY] [DLA 1329-1] memcached security update

Package : memcached Version : 1.4.13-0.2+deb7u4 CVE ID : CVE-2018-1000127 Debian Bug : 894404 memcached version prior to 1.4.37 contains an Integer Overflow vulnerability that can result in data corruption and deadlocks. This attack is exploitable via network connectivity to the memcached service...

SUSE-SU-2018:0839-1 Security update for memcached

This update for memcached fixes the following issues: - CVE-2017-9951: Fixed heap-based buffer over-read in tryreadcommand function which allowed remote attackers to cause a denial of service attack bsc1056865...

DLA-1329-1 memcached - security update

Bulletin has no description...

SUSE-SU-2018:0807-1 Security update for memcached

This update for memcached fixes the following issues: Security issues fixed: - CVE-2011-4971: remote DoS bsc817781. - CVE-2013-0179: DoS when printing out keys to be deleted in verbose mode bsc798458. - CVE-2013-7239: SASL authentication allows wrong credentials to access memcache bsc857188. -...

SUSE-SU-2018:0778-1 Security update for memcached

This update for memcached fixes the following issues: Security issues fixed: - CVE-2011-4971: remote DoS bsc817781. - CVE-2013-0179: DoS when printing out keys to be deleted in verbose mode bsc798458. - CVE-2013-7239: SASL authentication allows wrong credentials to access memcache bsc857188. -...

Ubuntu: Security Advisory (USN-3601-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS / 16.04 LTS : Memcached vulnerability (USN-3601-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-3601-1 advisory. It was discovered that Memcached incorrectly handled reusing certain items. A remote attacker could possibly use this issue to cause Memcached to cras...

USN-3601-1 memcached vulnerability

It was discovered that Memcached incorrectly handled reusing certain items. A remote attacker could possibly use this issue to cause Memcached to crash, resulting in a denial of service...

USN-3601-1: Memcached vulnerability

It was discovered that Memcached incorrectly handled reusing certain items. A remote attacker could possibly use this issue to cause Memcached to crash, resulting in a denial of service...

Memcrashed-DDoS-Exploit - DDoS Attack Tool For Sending Forged UDP Packets To Vulnerable Memcached Servers Obtained Using Shodan API

This tool allows you to send forged UDP packets to Memcached servers obtained from Shodan.io Prerequisites The only thing you need installed is Python 3.x apt-get install python3 You also require to have Scapy and Shodan modules installed pip install scapy pip install shodan Using Shodan API This...

Memcached 'item_free()' function integer overflow vulnerability

Memcached is the American software developer Brad Fitzpatrick Brad Fitzpatrick developed a set of high-performance distributed memory object caching system. The system by caching data and objects in memory to reduce the number of times to read the database , thus improving the speed of access to...

MGASA-2018-0165 Updated memcached packages disable UDP by default

Updated memcached packages fix security vulnerabilities: Memcached enabled UDP by default, which could be exploited to denial of service via network flood CVE-2018-1000115. By default this UPD is now closed. With this release some overflow and deadlock situations get fixed too...