Detections
Analytics
Scientific Linux Security Update : memcached on SL7.x x86_64 (20161123)
critical Nessus Plugin ID 95866
Language:
Synopsis
The remote Scientific Linux host is missing one or more security updates.Description
Security Fix(es) :- Two integer overflow flaws, leading to heap-based buffer overflows, were found in the memcached binary protocol.
An attacker could create a specially crafted message that would cause the memcached server to crash or, potentially, execute arbitrary code. (CVE-2016-8704, CVE-2016-8705)
- An integer overflow flaw, leading to a heap-based buffer overflow, was found in memcached's parsing of SASL authentication messages. An attacker could create a specially crafted message that would cause the memcached server to crash or, potentially, execute arbitrary code.
(CVE-2016-8706)
Solution
Update the affected memcached, memcached-debuginfo and / or memcached-devel packages.See Also
Plugin Details
Severity: Critical
ID: 95866
File Name: sl_20161123_memcached_on_SL7_x.nasl
Version: 3.6
Type: local
Agent: unix
Published: 12/15/2016
Updated: 1/14/2021
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: High
Base Score: 7.5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability Information
CPE: p-cpe:/a:fermilab:scientific_linux:memcached, p-cpe:/a:fermilab:scientific_linux:memcached-debuginfo, p-cpe:/a:fermilab:scientific_linux:memcached-devel, x-cpe:/o:fermilab:scientific_linux
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/RedHat/release, Host/RedHat/rpm-list
Patch Publication Date: 11/23/2016
Vulnerability Publication Date: 1/6/2017