PT-2016-7554 · Memcached+4 · Memcached+4

Aleksandar Nikolic

·

Publicado

2016-11-02

·

Atualizado

2024-06-15

·

CVE-2016-8706

CVSS v3.1

8.1

Alta

VetorAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Memcached (affected versions not specified)
Description The issue is related to an integer overflow in the process bin sasl auth function, which handles authentication commands for the Memcached binary protocol. This overflow can lead to a heap overflow, potentially resulting in remote code execution.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Integer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

ALT-PU-2016-2235
CESA-2016_2819
CVE-2016-8706
DLA-701-1
DSA-3704-1
MGASA-2016-0381
OPENSUSE-SU-2024:10021-1
RHSA-2016:2819
RHSA-2016_2819
SUSE-SU-2018:0778-1
SUSE-SU-2018:0807-1
USN-3120-1

Produtos afetados

Alt Linux
Centos
Memcached
Red Hat
Ubuntu