CVE-2016-8706 in Memcached

Résumé

par MITRE

An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsable: Talos
• Réserver: 17/10/2016
• Divulgation: 06/01/2017
• Modérer: accepté
• Entrée: VDB-93802
• CPE: prêt
• CWE: CWE-190 (confirmé)
• CVSS: 8.1 (NVD)
• EPSS: 0.45703
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-8706
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-8706
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-8706/