CVE-2016-8705
Critical · 9.8CVSS
9.8
EPSS
19.9%
Published
Jan 6, 2017
CISA due date
—
The record
Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Alpine:v3.4 | memcached | 0 | 1.4.33-r0 |
| Alpine:v3.5 | memcached | 0 | 1.4.33-r0 |
| Debian:11 | memcached | 0 | 1.4.33-1 |
| Debian:12 | memcached | 0 | 1.4.33-1 |
| Debian:13 | memcached | 0 | 1.4.33-1 |
| Debian:14 | memcached | 0 | 1.4.33-1 |
| Debian:7 | memcached | 0 | 1.4.13-0.2+deb7u2 |
| Debian:8 | memcached | 0 | 1.4.21-1.1+deb8u1 |
| Mageia:5 | memcached | 0 | 1.4.25-1.mga5 |
| Red Hat:enterprise_linux:6::client | memcached | 0 | 0:1.4.4-3.el6_8.1 |
| Red Hat:enterprise_linux:6::client | memcached-debuginfo | 0 | 0:1.4.4-3.el6_8.1 |
| Red Hat:enterprise_linux:6::client | memcached-devel | 0 | 0:1.4.4-3.el6_8.1 |
| Red Hat:enterprise_linux:6::computenode | memcached | 0 | 0:1.4.4-3.el6_8.1 |
| Red Hat:enterprise_linux:6::computenode | memcached-debuginfo | 0 | 0:1.4.4-3.el6_8.1 |
| Red Hat:enterprise_linux:6::computenode | memcached-devel | 0 | 0:1.4.4-3.el6_8.1 |
| Red Hat:enterprise_linux:6::server | memcached | 0 | 0:1.4.4-3.el6_8.1 |
| Red Hat:enterprise_linux:6::server | memcached-debuginfo | 0 | 0:1.4.4-3.el6_8.1 |
| Red Hat:enterprise_linux:6::server | memcached-devel | 0 | 0:1.4.4-3.el6_8.1 |
| Red Hat:enterprise_linux:6::workstation | memcached | 0 | 0:1.4.4-3.el6_8.1 |
| Red Hat:enterprise_linux:6::workstation | memcached-debuginfo | 0 | 0:1.4.4-3.el6_8.1 |
| Red Hat:enterprise_linux:6::workstation | memcached-devel | 0 | 0:1.4.4-3.el6_8.1 |
| Red Hat:enterprise_linux:7::client | memcached | 0 | 0:1.4.15-10.el7_3.1 |
| Red Hat:enterprise_linux:7::client | memcached-debuginfo | 0 | 0:1.4.15-10.el7_3.1 |
| Red Hat:enterprise_linux:7::client | memcached-devel | 0 | 0:1.4.15-10.el7_3.1 |
| Red Hat:enterprise_linux:7::computenode | memcached | 0 | 0:1.4.15-10.el7_3.1 |
| Red Hat:enterprise_linux:7::computenode | memcached-debuginfo | 0 | 0:1.4.15-10.el7_3.1 |
| Red Hat:enterprise_linux:7::computenode | memcached-devel | 0 | 0:1.4.15-10.el7_3.1 |
| Red Hat:enterprise_linux:7::server | memcached | 0 | 0:1.4.15-10.el7_3.1 |
| Red Hat:enterprise_linux:7::server | memcached-debuginfo | 0 | 0:1.4.15-10.el7_3.1 |
| Red Hat:enterprise_linux:7::server | memcached-devel | 0 | 0:1.4.15-10.el7_3.1 |
| Red Hat:enterprise_linux:7::workstation | memcached | 0 | 0:1.4.15-10.el7_3.1 |
| Red Hat:enterprise_linux:7::workstation | memcached-debuginfo | 0 | 0:1.4.15-10.el7_3.1 |
| Red Hat:enterprise_linux:7::workstation | memcached-devel | 0 | 0:1.4.15-10.el7_3.1 |
| Red Hat:mobile_application_platform:4.2 | rhmap-fh-openshift-templates | 0 | 0:1.0.0-5.el7 |
| SUSE:Enterprise Storage 4 | memcached | 0 | 1.4.39-3.3.2 |
| SUSE:Linux Enterprise Software Development Kit 11 SP4 | memcached | 0 | 1.2.6-5.17.4.1 |
| SUSE:OpenStack Cloud 6 | memcached | 0 | 1.4.39-3.3.1 |
| SUSE:OpenStack Cloud 7 | memcached | 0 | 1.4.39-3.3.2 |
| SUSE:Studio Onsite 1.3 | memcached | 0 | 1.2.6-5.17.4.1 |
| SUSE:Studio Onsite Runner 1.3 | memcached | 0 | 1.2.6-5.17.4.1 |
| Ubuntu:14.04:LTS | memcached | 0 | 1.4.14-0ubuntu9.1 |
| Ubuntu:16.04:LTS | memcached | 0 | 1.4.25-2ubuntu1.2 |
| openSUSE:Tumbleweed | memcached | 0 | 1.4.33-1.1 |
Related vulnerabilities
- CVE-2017-9951 The try_read_command function in memcached.c in memcached before 1.4.39 allows remote… Also affects memcached
- CVE-2016-8704 An integer overflow in the process_bin_append_prepend function in Memcached, which is… Also affects memcached
- CVE-2016-8706 An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible… Also affects memcached
- CVE-2011-4971 Multiple integer signedness errors in the (1) process_bin_sasl_auth, (2)… Also affects memcached
- CVE-2010-1152 memcached.c in memcached before 1.4.3 allows remote attackers to cause a denial of… Also affects memcached
- CVE-2019-0201 An issue is present in Apache ZooKeeper 1.0.0 to 3.4.13 and 3.5.0-alpha to 3.5.4-beta. Also affects memcached
- CVE-2026-47784 In memcached before 1.6.42, password data for SASL password database authentication has a… Also affects memcached
- CVE-2026-47783 In memcached before 1.6.42, username data for SASL password database authentication has a… Also affects memcached