Memcached Server Update remote code execution vulnerability

DETAILS Memcached is a high performance object caching server intended for speeding up dynamic web applications and is used by some of the most popular Internet websites. It has two versions of the protocol for storing and retrieving arbitrary data, an ASCII based one and a binary one. The binary...

Remote Code Execution Vulnerability in Memcached Append/Prepend

Memcached is a high-performance distributed in-memory object caching system for dynamic Web applications to reduce database load. A remote code execution vulnerability exists in Memcached Append/Prepend. processbinappendprepend function handles multiple commands of the Memcached binary protocol c...

Remote Code Execution Vulnerability in Memcached Update

Memcached is a high-performance distributed in-memory object caching system for dynamic Web applications to reduce database load. A remote code execution vulnerability exists in Memcached Update. processbinupdate function handling multiple commands of the Memcached binary protocol can lead to a...

Memcached 1.4.33 - 'Crash' (PoC)

Source: http://paper.seebug.org/95/ import struct import socket import sys MEMCACHEDREQUESTMAGIC = "\x80" OPCODEPREPENDQ = "\x1a" keylen = struct.pack"!H",0xfa extralen = "\x00" datatype = "\x00" vbucket = "\x00\x00" bodylen = struct.pack"!I",0 opaque = struct.pack"!I",0 CAS = struct.pack"!Q",0...

Memcached 1.4.33 - 'sasl' (PoC)

Source: http://paper.seebug.org/95/ import struct import socket import sys MEMCACHEDREQUESTMAGIC = "\x80" OPCODESET = "\x21" keylen = struct.pack"!H",32 bodylen = struct.pack"!I",1 packet = MEMCACHEDREQUESTMAGIC + OPCODESET + keylen + bodylen2 + "A"1000 if lensys.argv != 3: print "./pocsasl.py " ...

Memcached 1.4.33 - 'Add' (PoC)

Source: http://paper.seebug.org/95/ import struct import socket import sys MEMCACHEDREQUESTMAGIC = "\x80" OPCODEADD = "\x02" keylen = struct.pack"!H",0xfa extralen = "\x08" datatype = "\x00" vbucket = "\x00\x00" bodylen = struct.pack"!I",0xffffffd0 opaque = struct.pack"!I",0 CAS = struct.pack"!Q"...

[ASA-201611-1] memcached: arbitrary code execution

Arch Linux Security Advisory ASA-201611-1 ========================================= Severity: Critical Date : 2016-11-01 CVE-ID : CVE-2016-8704 CVE-2016-8705 CVE-2016-8706 Package : memcached Type : arbitrary code execution Remote : Yes Link : https://wiki.archlinux.org/index.php/CVE Summary...

Memcached Server SASL Autentication Remote Code Execution Vulnerability

Summary An integer overflow in processbinsaslauth function which is responsible for authentication commands of Memcached binary protocol can be abused to cause heap overflow and lead to remote code execution. Tested Versions Memcached 1.4.31 Product URLs https://memcached.org/ CVSSv3 Score 8.1 -...

Memcached Server Update Remote Code Execution Vulnerability

Summary Multiple integer overflows in processbinupdate function which is responsible for processing multiple commands of Memcached binary protocol can be abused to cause heap overflow and lead to remote code execution. Tested Versions Memcached 1.4.31 Product URLs https://memcached.org/ CVSSv3...

memcached -- multiple vulnerabilities

Cisco Talos reports: Multiple integer overflow vulnerabilities exist within Memcached that could be exploited to achieve remote code execution on the targeted system. These vulnerabilities manifest in various Memcached functions that are used in inserting, appending, prepending, or modifying...

Memcached Server Append/Prepend Remote Code Execution Vulnerability

Summary An integer overflow in the processbinappendprepend function which is responsible for processing multiple commands of Memcached binary protocol can be abused to cause heap overflow and lead to remote code execution. Tested Versions Memcached 1.4.31 Product URLs https://memcached.org/ CVSSv...

CVE-2016-5631

Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: Memcached...

CVE-2016-5631

Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: Memcached...

Design/Logic Flaw

Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: Memcached...

CVE-2016-5631

Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: Memcached...

UBUNTU-CVE-2016-5631

Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: Memcached...

CVE-2016-5631

Affected software: Oracle MySQL 5.7.13 and earlier. Vulnerable component: Server: Memcached. Description: Unspecified vulnerability allows remote administrators to affect availability. Impact: Partial availability impact. Root cause and remediation are not specified in the provided documents.

CVE-2016-5631

Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: Memcached...

CVE-2016-5631

Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: Memcached...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2016-09893)

Oracle MySQL is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost and good reliability. A remote security vulnerability exists in the 'Server: Memcached' subplugin in Oracle MySQL. A remote attacker can exploit th...