CVE-2016-8705

Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 94%
Affected Products (NVD)
VendorProductVersion
memcachedmemcached
𝑥
≤ 1.4.31
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
memcached
bookworm
1.6.18-1
fixed
bullseye
1.6.9+dfsg-1
fixed
sid
1.6.32-2
fixed
trixie
1.6.32-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
memcached
precise
Fixed 1.4.13-0ubuntu2.2
released
trusty
Fixed 1.4.14-0ubuntu9.1
released
xenial
Fixed 1.4.25-2ubuntu1.2
released
yakkety
Fixed 1.4.25-2ubuntu2.1
released
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
memcached
suse enterprise sap 15
1.5.6-2.10
fixed
suse enterprise sap 15 SP1
1.5.6-2.10
fixed
suse enterprise sap 15 SP2
1.5.6-4.5.30
fixed
suse enterprise sap 15 SP3
1.5.6-4.5.30
fixed
suse enterprise sap 15 SP4
1.5.6-4.7.1
fixed
suse enterprise sap 15 SP7
1.5.6-4.7.1
fixed
suse enterprise server 15
1.5.6-2.10
fixed
suse enterprise server 15 SP1
1.5.6-2.10
fixed
suse enterprise server 15 SP2
1.5.6-4.5.30
fixed
suse enterprise server 15 SP3
1.5.6-4.5.30
fixed
suse enterprise server 15 SP4
1.5.6-4.7.1
fixed
suse enterprise server 15 SP7
1.5.6-4.7.1
fixed
memcached-devel
suse enterprise sap 15
1.5.6-2.10
fixed
suse enterprise sap 15 SP1
1.5.6-2.10
fixed
suse enterprise sap 15 SP2
1.5.6-4.5.30
fixed
suse enterprise sap 15 SP3
1.5.6-4.5.30
fixed
suse enterprise sap 15 SP4
1.5.6-4.7.1
fixed
suse enterprise sap 15 SP7
1.5.6-4.7.1
fixed
suse enterprise server 15
1.5.6-2.10
fixed
suse enterprise server 15 SP1
1.5.6-2.10
fixed
suse enterprise server 15 SP2
1.5.6-4.5.30
fixed
suse enterprise server 15 SP3
1.5.6-4.5.30
fixed
suse enterprise server 15 SP4
1.5.6-4.7.1
fixed
suse enterprise server 15 SP7
1.5.6-4.7.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
memcached
RHEL 6
0:1.4.4-3.el6_8.1
fixed
RHEL 7
0:1.4.15-10.el7_3.1
fixed
memcached-devel
RHEL 6
0:1.4.4-3.el6_8.1
fixed
RHEL 7
0:1.4.15-10.el7_3.1
fixed
Common Weakness Enumeration
References
http://rhn.redhat.com/errata/RHSA-2016-2819.html
http://rhn.redhat.com/errata/RHSA-2016-2820.html
http://www.debian.org/security/2016/dsa-3704
http://www.securityfocus.com/bid/94083
http://www.securitytracker.com/id/1037333
http://www.talosintelligence.com/reports/TALOS-2016-0220/
https://access.redhat.com/errata/RHSA-2017:0059
https://security.gentoo.org/glsa/201701-12
http://rhn.redhat.com/errata/RHSA-2016-2819.html
http://rhn.redhat.com/errata/RHSA-2016-2820.html
http://www.debian.org/security/2016/dsa-3704
http://www.securityfocus.com/bid/94083
http://www.securitytracker.com/id/1037333
http://www.talosintelligence.com/reports/TALOS-2016-0220/
https://access.redhat.com/errata/RHSA-2017:0059
https://security.gentoo.org/glsa/201701-12