Home

CVE-2016-8706

Description

An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.

Risk Information

Base Score
8.1
MODERATE
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
68.629

Associated Vulnerability

VulnerabilityOS Platform
high-performance memory object caching system (USN-3120-1) memcached_1.4.13-0ubuntu2.2_i386.debLinux
high-performance memory object caching system (USN-3120-1) memcached_1.4.13-0ubuntu2.2_amd64.debLinux
high-performance memory object caching system (USN-3120-1) memcached_1.4.14-0ubuntu9.1_i386.debLinux
high-performance memory object caching system (USN-3120-1) memcached_1.4.14-0ubuntu9.1_amd64.debLinux
high-performance memory object caching system (USN-3120-1) memcached_1.4.25-2ubuntu1.2_i386.debLinux
high-performance memory object caching system (USN-3120-1) memcached_1.4.25-2ubuntu1.2_amd64.debLinux
Memcached 1.4.25-2ubuntu2.1 for Ubuntu 16.10 (x64) memcached_1.4.25-2ubuntu2.1_amd64.debLinux
Memcached 1.4.25-2ubuntu2.1 for Ubuntu 16.10 memcached_1.4.25-2ubuntu2.1_i386.debLinux
memcached security update(DSA-3704-1) memcached_1.4.21-1.1+deb8u1_amd64.debLinux
memcached security update(DSA-3704-1) memcached_1.4.21-1.1+deb8u1_kfreebsd-i386.debLinux
memcached security update(DSA-3704-1) memcached_1.4.21-1.1+deb8u1_kfreebsd-amd64.debLinux
(RHSA-2016:2819) Important: memcached security update memcached-1.4.15-10.el7_3.1.x86_64.rpmLinux
(RHSA-2016:2819) Important: memcached security update memcached-devel-1.4.15-10.el7_3.1.i686.rpmLinux
(RHSA-2016:2819) Important: memcached security update memcached-devel-1.4.15-10.el7_3.1.x86_64.rpmLinux
Memcached update (ELSA-2016-2819) memcached-1.4.15-10.el7_3.1.x86_64.rpmLinux
Memcached-devel update (ELSA-2016-2819) memcached-devel-1.4.15-10.el7_3.1.x86_64.rpmLinux
Memcached-devel update (ELSA-2016-2819) memcached-devel-1.4.15-10.el7_3.1.i686.rpmLinux
(CESA-2016:2819) Important: memcached security update memcached-1.4.15-10.el7_3.1.x86_64.rpmLinux
(RHSA-2016:2819)Important: security update memcached-debuginfo-1.4.15-10.el7_3.1.i686.rpmLinux
(RHSA-2016:2819)Important: security update memcached-debuginfo-1.4.15-10.el7_3.1.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234