Description
Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Memcached Memcached
1.4.31affected
References
- https://security.gentoo.org/glsa/201701-12 ↗
- http://www.debian.org/security/2016/dsa-3704 ↗
- http://rhn.redhat.com/errata/RHSA-2016-2819.html ↗
- http://www.securityfocus.com/bid/94083 ↗
- http://rhn.redhat.com/errata/RHSA-2016-2820.html ↗
- https://access.redhat.com/errata/RHSA-2017:0059 ↗
- http://www.securitytracker.com/id/1037333 ↗
- http://www.talosintelligence.com/reports/TALOS-2016-0220/ ↗