Wind River Support Network

HomeDefectsLIN8-7160
Fixed

LIN8-7160 : Security Advisory - memcached - CVE-2017-9951

Created: Jul 27, 2017    Updated: Dec 3, 2018
Resolved Date: Aug 15, 2017
Found In Version: 8.0.0.19
Fix Version: 8.0.0.21
Severity: Standard
Applicable for: Wind River Linux 8
Component/s: Userspace

Description

The try_read_command function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service (segmentation fault) via a request to add/set a key, which makes a comparison between signed and unsigned int and triggers a heap-based buffer over-read. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8705.

https://nvd.nist.gov/vuln/detail/CVE-2017-9951

Other Downloads


CVEs


Live chat
Online