Lucene search
Veracode Vulnerability DatabaseVERACODE:17825HistoryMay 02, 2019 - 6:07 a.m.
Remote Code Execution (RCE)
2019-05-0206:07:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
0.887 High
EPSS
Percentile
98.7%
memcached is vulnerable to integer overflow vulnerability. Attackers could send a specially crafted authentication command of Memcached binary protocol which may cause heap overflow and lead to remote code execution.
References
rhn.redhat.com/errata/RHSA-2016-2819.html
www.debian.org/security/2016/dsa-3704
www.securityfocus.com/bid/94083
www.securitytracker.com/id/1037333
www.talosintelligence.com/reports/TALOS-2016-0221/
access.redhat.com/security/updates/classification/#important
rhn.redhat.com/errata/RHSA-2016-2819.html
security.gentoo.org/glsa/201701-12
Related
talos
talos
Memcached Server SASL Autentication Remote Code Execution Vulnerability
2016-10-31 00:00:00
checkpoint_advisories
checkpoint_advisories
Memcached process_bin_sasl_auth Integer Underflow (CVE-2016-8706)
2016-12-08 00:00:00
prion
prion
Integer overflow
2017-01-06 21:59:00
cvelist
cvelist
CVE-2016-8706
2017-01-06 21:00:00
ubuntucve
ubuntucve
CVE-2016-8706
2016-11-02 00:00:00
alpinelinux
alpinelinux
CVE-2016-8706
2017-01-06 21:59:01
cve
cve
CVE-2016-8706
2017-01-06 21:59:01
redhatcve
redhatcve
CVE-2016-8706
2016-11-01 09:47:30
nvd
nvd
CVE-2016-8706
2017-01-06 21:59:01
debiancve
debiancve
CVE-2016-8706
2017-01-06 21:59:01
osv
osv
CVE-2016-8706
2017-01-06 21:59:01
memcached - security update
2016-11-03 00:00:00
memcached - security update
2016-11-05 00:00:00
talosblog
talosblog
Memcached - A Story of Failed Patching & Vulnerable Servers
2017-07-17 07:35:00
freebsd
freebsd
memcached -- multiple vulnerabilities
2016-10-31 00:00:00
openvas
openvas
Fedora Update for memcached FEDORA-2016-0c4e822340
2016-12-08 00:00:00
Fedora Update for memcached FEDORA-2016-4df986a71f
2016-12-02 00:00:00
Ubuntu: Security Advisory (USN-3120-1)
2016-11-08 00:00:00
nessus
nessus
fedora
fedora
[SECURITY] Fedora 24 Update: memcached-1.4.25-2.fc24
2016-11-14 21:02:25
[SECURITY] Fedora 23 Update: memcached-1.4.17-5.fc23
2016-11-14 23:52:16
[SECURITY] Fedora 25 Update: memcached-1.4.33-1.fc25
2016-12-08 03:53:46
altlinux
altlinux
Security fix for the ALT Linux 8 package memcached version 1.4.33-alt1
2016-11-02 00:00:00
debian
debian
[SECURITY] [DSA 3704-1] memcached security update
2016-11-03 16:24:14
[SECURITY] [DSA 3704-1] memcached security update
2016-11-03 16:24:14
[SECURITY] [DLA 701-1] memcached security update
2016-11-05 14:57:27
centos
centos
memcached security update
2016-11-25 16:47:41
thn
thn
Over 70,000 Memcached Servers Still Vulnerable to Remote Hacking
2017-07-18 04:52:00
packetstorm
packetstorm
Memcached 1.4.33 Proof Of Concept
2016-11-03 00:00:00
archlinux
archlinux
[ASA-201611-1] memcached: arbitrary code execution
2016-11-01 00:00:00
oraclelinux
oraclelinux
memcached security update
2016-11-23 00:00:00
memcached security update
2016-11-23 00:00:00
ibm
ibm
ubuntu
ubuntu
Memcached vulnerabilities
2016-11-02 00:00:00
gentoo
gentoo
memcached: Multiple vulnerabilities
2017-01-02 00:00:00
amazon
amazon
Important: memcached
2016-11-10 18:00:00
redhat
redhat
(RHSA-2016:2819) Important: memcached security update
2016-11-23 04:43:57
mageia
mageia
Updated memcached packages fix security vulnerability
2016-11-17 19:37:05
suse
suse
Security update for memcached (important)
2018-03-26 15:09:40
Security update for memcached (important)
2018-03-22 17:27:53