Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:0839-1

Опубликовано: 29 мар. 2018
Источник: suse-cvrf

Описание

Security update for memcached

This update for memcached fixes the following issues:

  • CVE-2017-9951: Fixed heap-based buffer over-read in try_read_command function which allowed remote attackers to cause a denial of service attack (bsc#1056865).

Список пакетов

SUSE Linux Enterprise Server 12 SP2
memcached-1.4.39-4.3.1
SUSE Linux Enterprise Server 12 SP3
memcached-1.4.39-4.3.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
memcached-1.4.39-4.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2
memcached-1.4.39-4.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
memcached-1.4.39-4.3.1
SUSE Linux Enterprise Software Development Kit 12 SP2
memcached-devel-1.4.39-4.3.1

Ссылки

Описание

The try_read_command function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service (segmentation fault) via a request to add/set a key, which makes a comparison between signed and unsigned int and triggers a heap-based buffer over-read. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8705.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP2:memcached-1.4.39-4.3.1
SUSE Linux Enterprise Server 12 SP3:memcached-1.4.39-4.3.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:memcached-1.4.39-4.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2:memcached-1.4.39-4.3.1
Ссылки