このページは Debian 向けの修正状況です。脆弱性そのものの説明は CVE 本体のページにあります。
CVE-2016-8706 の詳細 →
DEBIAN-CVE-2016-8706
An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of Memcached binary protocol, can...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.
出典: OSV.dev (Open Source Vulnerabilities) OSV
影響パッケージ
Debian:12
memcached
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.33-1"}]}]
Debian:13
memcached
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.33-1"}]}]
Debian:14
memcached
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.33-1"}]}]
参照URL
- advisory security-tracker.debian.org