9.8
Critical
CVE-2016-8705 Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing multiple…
Description
Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Memcached | 1.4.31 | No fix stated |
References
- GLSA-201701-12 security.gentoo.org
- DSA-3704 www.debian.org
- RHSA-2016:2819 rhn.redhat.com
- 94083 www.securityfocus.com
- RHSA-2016:2820 rhn.redhat.com
- RHSA-2017:0059 access.redhat.com
- 1037333 www.securitytracker.com
- www.talosintelligence.com www.talosintelligence.com
Timeline
- Published
- Last modified
Other CVEs of Memcached
The 7 CVEs of Memcached →
CVE-2026-47784
In memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because…
8.1
High
CVE-2026-47783
In memcached before 1.6.42, username data for SASL password database authentication has a timing side channel because…
8.1
High
CVE-2023-46852
In Memcached before 1.6.22, a buffer overflow exists when processing multiget requests in proxy mode, if there are…
Not rated
CVE-2023-46853
In Memcached before 1.6.22, an off-by-one error exists when processing proxy requests in proxy mode, if \n is used…
Not rated