Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2018:0855-1

Опубликовано: 30 мар. 2018
Источник: suse-cvrf

Описание

Security update for memcached

This update for memcached fixes the following issues:

  • CVE-2017-9951: Fixed heap-based buffer over-read in try_read_command function which allowed remote attackers to cause a denial of service attack (bsc#1056865).

This update was imported from the SUSE:SLE-12:Update update project.

Список пакетов

openSUSE Leap 42.3
memcached-1.4.39-11.3.1
memcached-devel-1.4.39-11.3.1

Ссылки

Описание

The try_read_command function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service (segmentation fault) via a request to add/set a key, which makes a comparison between signed and unsigned int and triggers a heap-based buffer over-read. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8705.

Затронутые продукты
openSUSE Leap 42.3:memcached-1.4.39-11.3.1
openSUSE Leap 42.3:memcached-devel-1.4.39-11.3.1
Ссылки