PT-2016-7552 · Memcached+4 · Memcached+4

Aleksandar Nikolic

·

Publicado

2016-11-02

·

Atualizado

2024-06-15

·

CVE-2016-8704

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Memcached (affected versions not specified)
Description The issue is related to an integer overflow in the process bin append prepend function, which handles multiple commands of the Memcached binary protocol. This overflow can lead to a heap overflow, potentially resulting in remote code execution.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Integer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

ALT-PU-2016-2235
CESA-2016_2819
CESA-2016_2820
CVE-2016-8704
DLA-701-1
DSA-3704-1
MGASA-2016-0381
OPENSUSE-SU-2024:10021-1
RHSA-2016:2819
RHSA-2016:2820
RHSA-2016_2819
RHSA-2016_2820
RHSA-2017:0059
SUSE-SU-2018:0778-1
SUSE-SU-2018:0807-1
USN-3120-1

Produtos afetados

Alt Linux
Centos
Memcached
Red Hat
Ubuntu