Home

CVE-2016-8704

Description

An integer overflow in the process_bin_append_prepend function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.

Risk Information

Base Score
9.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
18.304

Associated Vulnerability

VulnerabilityOS Platform
high-performance memory object caching system (USN-3120-1) memcached_1.4.13-0ubuntu2.2_i386.debLinux
high-performance memory object caching system (USN-3120-1) memcached_1.4.13-0ubuntu2.2_amd64.debLinux
high-performance memory object caching system (USN-3120-1) memcached_1.4.14-0ubuntu9.1_i386.debLinux
high-performance memory object caching system (USN-3120-1) memcached_1.4.14-0ubuntu9.1_amd64.debLinux
high-performance memory object caching system (USN-3120-1) memcached_1.4.25-2ubuntu1.2_i386.debLinux
high-performance memory object caching system (USN-3120-1) memcached_1.4.25-2ubuntu1.2_amd64.debLinux
Memcached 1.4.25-2ubuntu2.1 for Ubuntu 16.10 (x64) memcached_1.4.25-2ubuntu2.1_amd64.debLinux
Memcached 1.4.25-2ubuntu2.1 for Ubuntu 16.10 memcached_1.4.25-2ubuntu2.1_i386.debLinux
memcached security update(DSA-3704-1) memcached_1.4.21-1.1+deb8u1_amd64.debLinux
memcached security update(DSA-3704-1) memcached_1.4.21-1.1+deb8u1_kfreebsd-i386.debLinux
memcached security update(DSA-3704-1) memcached_1.4.21-1.1+deb8u1_kfreebsd-amd64.debLinux
(RHSA-2016:2820) Important: memcached security update memcached-1.4.4-3.el6_8.1.i686.rpmLinux
(RHSA-2016:2820) Important: memcached security update memcached-1.4.4-3.el6_8.1.x86_64.rpmLinux
(RHSA-2016:2820) Important: memcached security update memcached-devel-1.4.4-3.el6_8.1.i686.rpmLinux
(RHSA-2016:2820) Important: memcached security update memcached-devel-1.4.4-3.el6_8.1.x86_64.rpmLinux
Memcached update (ELSA-2016-2819) memcached-1.4.15-10.el7_3.1.x86_64.rpmLinux
Memcached-devel update (ELSA-2016-2819) memcached-devel-1.4.15-10.el7_3.1.x86_64.rpmLinux
Memcached-devel update (ELSA-2016-2819) memcached-devel-1.4.15-10.el7_3.1.i686.rpmLinux
(CESA-2016:2819) Important: memcached security update memcached-1.4.15-10.el7_3.1.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234