Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-memcached | Sep 20, 2017 | Jan 6, 2017 | |
| Amazon_linux | — | amazon-linux-upgrade-memcached | Nov 11, 2016 | Nov 10, 2016 |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Jan 6, 2017 | |
| Centos_linux | — | centos-upgrade-memcachedcentos-upgrade-memcached-devel | Jan 27, 2017 | Nov 28, 2016 |
| Debian | debian-upgrade-memcached | Nov 3, 2016 | Nov 3, 2016 | |
| Freebsd | freebsd-upgrade-package-memcached | Nov 14, 2016 | Nov 2, 2016 | |
| Gentoo Linux | gentoo-linux-upgrade-net-misc-memcached | Oct 30, 2017 | Jan 6, 2017 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-memcached | Nov 30, 2017 | Jan 6, 2017 | |
| Oracle Solaris | oracle-solaris-11-3-upgrade-service-memcached-1-4-33-0-175-3-16-0-3-0oracle-solaris-11-4-upgrade-service-memcached-1-5-11-11-4-5-0-1-2-0 | May 29, 2017 | Jan 6, 2017 | |
| Oracle_linux | — | oracle-linux-upgrade-memcachedoracle-linux-upgrade-memcached-devel | Nov 23, 2016 | Oct 31, 2016 |
| Redhat_linux | — | redhat-upgrade-memcachedredhat-upgrade-memcached-debuginforedhat-upgrade-memcached-devel | Nov 23, 2016 | Nov 23, 2016 |
| Suse | — | suse-upgrade-memcachedsuse-upgrade-memcached-devel | Jan 6, 2017 | Jan 6, 2017 |
| Ubuntu | ubuntu-upgrade-memcached | Nov 3, 2016 | Nov 2, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub