PT-2009-1106 · Memcached · Memcached

Ronald Volgers

·

Publicado

2009-08-10

·

Atualizado

2014-06-15

·

CVE-2009-2415

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions memcached versions prior to 1.4.17
Description The issue concerns multiple vulnerabilities in the memcached package that can be exploited remotely, potentially leading to breaches of confidentiality, integrity, and availability of protected information. Specifically, integer overflows in certain versions of memcached can allow remote attackers to execute arbitrary code by exploiting length attributes that trigger heap-based buffer overflows.
Recommendations For versions prior to 1.4.17, update to version 1.4.17 or later to resolve the issue. As a temporary workaround, consider restricting access to the memcached service to minimize the risk of exploitation. Avoid using the vulnerable memcached package until the issue is resolved by updating to a non-vulnerable version.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

BDU:2015-09681
CVE-2009-2415
DSA-1853-1

Produtos afetados

Memcached