Lucene search
Veracode Vulnerability DatabaseVERACODE:25290HistoryMay 10, 2020 - 11:24 p.m.
Denial Of Service (DoS)
2020-05-1023:24:29
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
20
0.867 High
EPSS
Percentile
98.6%
memcached is vulnerable to denial of service (DoS). The vulnerability exists as the try_read_command function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service (segmentation fault) via a request to add/set a key, which makes a comparison between signed and unsigned int and triggers a heap-based buffer over-read. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8705.
| CPE | Name | Operator | Version |
|---|---|---|---|
| memcached:3.3 | eq | 1.4.33-r0 | |
| memcached:3.3 | eq | 1.4.33-r0 |
References
www.securityfocus.com/bid/99874
github.com/memcached/memcached/wiki/ReleaseNotes1439
groups.google.com/forum/message/raw?msg=memcached/ubGWrkmrr4E/nrm1SeVJAQAJ
usn.ubuntu.com/3588-1/
www.debian.org/security/2018/dsa-4218
www.twistlock.com/2017/07/13/cve-2017-9951-heap-overflow-memcached-server-1-4-38-twistlock-vulnerability-report/
Related
prion
prion
Heap overflow
2017-07-17 13:18:00
Integer overflow
2017-01-06 21:59:00
openvas
openvas
Fedora Update for memcached FEDORA-2017-99c0118c0c
2017-11-23 00:00:00
Fedora Update for memcached FEDORA-2017-1c053de325
2017-11-23 00:00:00
Debian: Security Advisory (DLA-1033-1)
2018-02-07 00:00:00
fedora
fedora
[SECURITY] Fedora 25 Update: memcached-1.4.39-1.fc25
2017-11-22 05:09:09
[SECURITY] Fedora 26 Update: memcached-1.4.39-1.fc26
2017-11-22 02:32:28
[SECURITY] Fedora 26 Update: memcached-1.4.39-2.fc26
2018-04-22 00:59:35
osv
osv
CVE-2017-9951
2017-07-17 13:18:30
CVE-2016-8705
2017-01-06 21:59:01
memcached - security update
2017-07-20 00:00:00
debiancve
debiancve
CVE-2017-9951
2017-07-17 13:18:30
CVE-2016-8705
2017-01-06 21:59:01
cve
cve
CVE-2017-9951
2017-07-17 13:18:30
CVE-2016-8705
2017-01-06 21:59:01
alpinelinux
alpinelinux
CVE-2017-9951
2017-07-17 13:18:30
CVE-2016-8705
2017-01-06 21:59:01
redhatcve
redhatcve
CVE-2017-9951
2017-07-17 20:18:35
CVE-2016-8705
2017-01-11 19:17:30
nvd
nvd
CVE-2017-9951
2017-07-17 13:18:30
CVE-2016-8705
2017-01-06 21:59:01
debian
debian
[SECURITY] [DLA 1033-1] memcached security update
2017-07-20 09:08:07
[SECURITY] [DSA 4218-1] memcached security update
2018-06-06 18:52:34
[SECURITY] [DSA 4218-1] memcached security update
2018-06-06 18:52:34
ubuntucve
ubuntucve
CVE-2017-9951
2017-07-17 00:00:00
CVE-2016-8705
2016-11-02 00:00:00
nessus
nessus
Debian DLA-1033-1 : memcached security update
2017-07-21 00:00:00
EulerOS Virtualization 3.0.6.0 : memcached (EulerOS-SA-2020-1784)
2020-07-01 00:00:00
EulerOS 2.0 SP5 : memcached (EulerOS-SA-2019-2213)
2019-11-08 00:00:00
cvelist
cvelist
CVE-2017-9951
2017-07-17 06:00:00
CVE-2016-8705
2017-01-06 21:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1917
2021-07-02 17:28:39
talos
talos
Memcached Server Update Remote Code Execution Vulnerability
2016-10-31 00:00:00
checkpoint_advisories
checkpoint_advisories
Memcached process_bin_update body_len Integer Overflow (CVE-2016-8705)
2016-11-29 00:00:00
mageia
mageia
Updated memcached packages fix security vulnerability
2017-12-02 02:13:21
Updated memcached packages fix security vulnerability
2016-11-17 19:37:05
veracode
veracode
Remote Code Execution (RCE)
2019-05-02 06:07:42
suse
suse
Security update for memcached (important)
2018-03-30 15:08:08
Security update for memcached (important)
2018-03-29 12:13:00
Security update for memcached (important)
2018-03-26 15:09:40
ibm
ibm
redhat
redhat
(RHSA-2017:0059) Moderate: Red Hat Mobile Application Platform 4.2.1 Security Update - SDKs and RPMs
2017-01-11 16:26:55
(RHSA-2016:2820) Important: memcached security update
2016-11-23 04:44:15
(RHSA-2016:2819) Important: memcached security update
2016-11-23 04:43:57
centos
centos
memcached security update
2016-11-28 22:32:14
memcached security update
2016-11-25 16:47:41
ubuntu
ubuntu
Memcached vulnerabilities
2018-03-05 00:00:00
Memcached vulnerabilities
2016-11-02 00:00:00
oraclelinux
oraclelinux
memcached security update
2016-11-23 00:00:00
memcached security update
2016-11-23 00:00:00
thn
thn
Multiple Critical Remotely Exploitable Flaws Discovered in Memcached Caching System
2016-11-01 23:21:00
Over 70,000 Memcached Servers Still Vulnerable to Remote Hacking
2017-07-18 04:52:00
gentoo
gentoo
memcached: Multiple vulnerabilities
2017-01-02 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package memcached version 1.4.33-alt1
2016-11-02 00:00:00
packetstorm
packetstorm
Memcached 1.4.33 Proof Of Concept
2016-11-03 00:00:00
amazon
amazon
Important: memcached
2016-11-10 18:00:00
freebsd
freebsd
memcached -- multiple vulnerabilities
2016-10-31 00:00:00
archlinux
archlinux
[ASA-201611-1] memcached: arbitrary code execution
2016-11-01 00:00:00