CVE-2016-8706

Published: 02 November 2016

An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.

Priority

High

CVSS 3 base score: 8.1

Status

Package Release Status
memcached
Launchpad, Ubuntu, Debian
Upstream
Released (1.4.33)
Ubuntu 16.04 ESM (Xenial Xerus)
Released (1.4.25-2ubuntu1.2)
Ubuntu 14.04 ESM (Trusty Tahr) Does not exist
(trusty was released [1.4.14-0ubuntu9.1])
Patches:
Upstream: https://github.com/memcached/memcached/commit/bd578fc34b96abe0f8d99c1409814a09f51ee71c