CoreCVE
Back

HIGH

memcached: Heap-based buffer over-read in try_read_command function (incomplete fix for CVE-2016-8705)

Published Jul 17, 2017

Description

The try_read_command function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service (segmentation fault) via a request to add/set a key, which makes a comparison between signed and unsigned int and triggers a heap-based buffer over-read. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8705.

Affected products

Remediation

Red Hat statement

Red Hat Product Security has rated this issue as having Low security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.

Red Hat mitigation

This flaw is in the memcached binary protocol. If your client programs only use the ASCII protocol when communicating with memcached, you can disable the binary protocol and protect against this flaw by adding "-B ascii" to OPTIONS in /etc/sysconfig/memcached.

Metrics

Weaknesses (1)

CWE-119

Buffer Overflow

References (10)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jul 17, 2017
Updated Aug 5, 2024
Reserved Jun 26, 2017
Link CVE-2017-9951
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2017-9951
Red Hat
Severity Low
Public date Jul 17, 2017
Links CVE-2017-9951 - Bugzilla