Vulnerability-Lookup

CVE-2016-8704 (GCVE-0-2016-8704)

Vulnerability from cvelistv5 – Published: 2017-01-06 21:00 – Updated: 2024-08-06 02:27

Summary

An integer overflow in the process_bin_append_prepend function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.

Severity

9.8 (Critical)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

integer overflow

Assigner

talos mitre root

References

8 references

URL	Tags
https://security.gentoo.org/glsa/201701-12	vendor-advisoryx_refsource_GENTOO
http://www.debian.org/security/2016/dsa-3704	vendor-advisoryx_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2016-2819.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/94083	vdb-entryx_refsource_BID
http://rhn.redhat.com/errata/RHSA-2016-2820.html	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2017:0059	vendor-advisoryx_refsource_REDHAT
http://www.securitytracker.com/id/1037333	vdb-entryx_refsource_SECTRACK
http://www.talosintelligence.com/reports/TALOS-20…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version	CPE status
Memcached	Memcached	Affected: 1.4.31	guessed

Date Public

2016-10-31 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:27:41.247Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201701-12",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-12"
          },
          {
            "name": "DSA-3704",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3704"
          },
          {
            "name": "RHSA-2016:2819",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2819.html"
          },
          {
            "name": "94083",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94083"
          },
          {
            "name": "RHSA-2016:2820",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2820.html"
          },
          {
            "name": "RHSA-2017:0059",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:0059"
          },
          {
            "name": "1037333",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037333"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.talosintelligence.com/reports/TALOS-2016-0219/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Memcached",
          "vendor": "Memcached",
          "versions": [
            {
              "status": "affected",
              "version": "1.4.31"
            }
          ]
        }
      ],
      "datePublic": "2016-10-31T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "An integer overflow in the process_bin_append_prepend function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "integer overflow",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-04-19T19:16:37.000Z",
        "orgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b",
        "shortName": "talos"
      },
      "references": [
        {
          "name": "GLSA-201701-12",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-12"
        },
        {
          "name": "DSA-3704",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3704"
        },
        {
          "name": "RHSA-2016:2819",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2819.html"
        },
        {
          "name": "94083",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94083"
        },
        {
          "name": "RHSA-2016:2820",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-2820.html"
        },
        {
          "name": "RHSA-2017:0059",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:0059"
        },
        {
          "name": "1037333",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037333"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.talosintelligence.com/reports/TALOS-2016-0219/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "talos-cna@cisco.com",
          "ID": "CVE-2016-8704",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Memcached",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "1.4.31"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Memcached"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An integer overflow in the process_bin_append_prepend function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution."
            }
          ]
        },
        "impact": {
          "cvss": {
            "baseScore": 9.8,
            "baseSeverity": "Critical",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "integer overflow"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201701-12",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201701-12"
            },
            {
              "name": "DSA-3704",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3704"
            },
            {
              "name": "RHSA-2016:2819",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2819.html"
            },
            {
              "name": "94083",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/94083"
            },
            {
              "name": "RHSA-2016:2820",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2820.html"
            },
            {
              "name": "RHSA-2017:0059",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:0059"
            },
            {
              "name": "1037333",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037333"
            },
            {
              "name": "http://www.talosintelligence.com/reports/TALOS-2016-0219/",
              "refsource": "MISC",
              "url": "http://www.talosintelligence.com/reports/TALOS-2016-0219/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b",
    "assignerShortName": "talos",
    "cveId": "CVE-2016-8704",
    "datePublished": "2017-01-06T21:00:00.000Z",
    "dateReserved": "2016-10-17T00:00:00.000Z",
    "dateUpdated": "2024-08-06T02:27:41.247Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2016-8704",
      "date": "2026-09-16",
      "epss": "0.23173",
      "percentile": "0.9765"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:memcached:memcached:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"1.4.31\", \"matchCriteriaId\": \"A3865AAC-C676-4002-98CC-49C199D55C0E\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"An integer overflow in the process_bin_append_prepend function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.\"}, {\"lang\": \"es\", \"value\": \"Un desbordamiento de entero en la funci\\u00f3n process_bin_update en Memcached, que es responsable de procesar m\\u00faltiples comandos de protocolo binario Memcached, puede ser abusado para provocar desbordamiento en la memoria din\\u00e1mica y conducir a la ejecuci\\u00f3n remota de c\\u00f3digo.\"}]",
      "id": "CVE-2016-8704",
      "lastModified": "2024-11-21T02:59:53.553",
      "metrics": "{\"cvssMetricV30\": [{\"source\": \"talos-cna@cisco.com\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.0\", \"vectorString\": \"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"baseScore\": 9.8, \"baseSeverity\": \"CRITICAL\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 5.9}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.0\", \"vectorString\": \"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"baseScore\": 9.8, \"baseSeverity\": \"CRITICAL\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 5.9}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:P/I:P/A:P\", \"baseScore\": 7.5, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 10.0, \"impactScore\": 6.4, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
      "published": "2017-01-06T21:59:01.790",
      "references": "[{\"url\": \"http://rhn.redhat.com/errata/RHSA-2016-2819.html\", \"source\": \"talos-cna@cisco.com\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2016-2820.html\", \"source\": \"talos-cna@cisco.com\"}, {\"url\": \"http://www.debian.org/security/2016/dsa-3704\", \"source\": \"talos-cna@cisco.com\"}, {\"url\": \"http://www.securityfocus.com/bid/94083\", \"source\": \"talos-cna@cisco.com\"}, {\"url\": \"http://www.securitytracker.com/id/1037333\", \"source\": \"talos-cna@cisco.com\"}, {\"url\": \"http://www.talosintelligence.com/reports/TALOS-2016-0219/\", \"source\": \"talos-cna@cisco.com\", \"tags\": [\"Exploit\", \"Technical Description\", \"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2017:0059\", \"source\": \"talos-cna@cisco.com\"}, {\"url\": \"https://security.gentoo.org/glsa/201701-12\", \"source\": \"talos-cna@cisco.com\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2016-2819.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://rhn.redhat.com/errata/RHSA-2016-2820.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.debian.org/security/2016/dsa-3704\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/bid/94083\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securitytracker.com/id/1037333\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.talosintelligence.com/reports/TALOS-2016-0219/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\", \"Technical Description\", \"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2017:0059\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://security.gentoo.org/glsa/201701-12\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "talos-cna@cisco.com",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-190\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2016-8704\",\"sourceIdentifier\":\"talos-cna@cisco.com\",\"published\":\"2017-01-06T21:59:01.790\",\"lastModified\":\"2026-05-06T22:30:45.220\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"An integer overflow in the process_bin_append_prepend function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.\"},{\"lang\":\"es\",\"value\":\"Un desbordamiento de entero en la funci\u00f3n process_bin_update en Memcached, que es responsable de procesar m\u00faltiples comandos de protocolo binario Memcached, puede ser abusado para provocar desbordamiento en la memoria din\u00e1mica y conducir a la ejecuci\u00f3n remota de c\u00f3digo.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"talos-cna@cisco.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:P/A:P\",\"baseScore\":7.5,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-190\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:memcached:memcached:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"1.4.31\",\"matchCriteriaId\":\"A3865AAC-C676-4002-98CC-49C199D55C0E\"}]}]}],\"references\":[{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-2819.html\",\"source\":\"talos-cna@cisco.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-2820.html\",\"source\":\"talos-cna@cisco.com\"},{\"url\":\"http://www.debian.org/security/2016/dsa-3704\",\"source\":\"talos-cna@cisco.com\"},{\"url\":\"http://www.securityfocus.com/bid/94083\",\"source\":\"talos-cna@cisco.com\"},{\"url\":\"http://www.securitytracker.com/id/1037333\",\"source\":\"talos-cna@cisco.com\"},{\"url\":\"http://www.talosintelligence.com/reports/TALOS-2016-0219/\",\"source\":\"talos-cna@cisco.com\",\"tags\":[\"Exploit\",\"Technical Description\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:0059\",\"source\":\"talos-cna@cisco.com\"},{\"url\":\"https://security.gentoo.org/glsa/201701-12\",\"source\":\"talos-cna@cisco.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-2819.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-2820.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.debian.org/security/2016/dsa-3704\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/94083\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securitytracker.com/id/1037333\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.talosintelligence.com/reports/TALOS-2016-0219/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Technical Description\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2017:0059\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.gentoo.org/glsa/201701-12\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Important",
      "current_release_date": "2026-06-30T11:26:21+00:00",
      "cve": "CVE-2016-8704",
      "id": "CVE-2016-8704",
      "initial_release_date": "2016-10-31T00:00:00+00:00",
      "product_status:fixed": "91",
      "product_status:known_affected": "3",
      "product_status:known_not_affected": "2",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "memcached: Server append/prepend remote code execution",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2016/cve-2016-8704.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-01T02:10:08Z",
      "cve": "CVE-2016-8704",
      "id": "CVE-2016-8704",
      "initial_release_date": "2023-02-15T04:56:38Z",
      "product_status:known_not_affected": "24",
      "product_status:recommended": "105",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2016-8704",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2016-8704.json",
      "version": "18"
    }
  }
}

CNVD-2016-10468

Vulnerability from cnvd - Published: 2016-11-01

Title

Memcached Append/Prepend存在远程代码执行漏洞

Description

Memcached是一个高性能的分布式内存对象缓存系统，用于动态Web应用以减轻数据库负载。 Memcached Append/Prepend存在远程代码执行漏洞。process_bin_append_prepend函数处理Memcached二进制协议的多个命令被滥用时可导致堆溢出。远程攻击者利用漏洞可执行任意代码。

Severity

高

Patch Name

Memcached Append/Prepend存在远程代码执行漏洞的补丁

Patch Description

Formal description

厂商已发布新版本修复该漏洞，请升级至官方最新版本：http://www.memcached.org/files/memcached-1.4.33.tar.gz

Reference

http://www.talosintelligence.com/reports/TALOS-2016-0219/

Impacted products

Name
Memcached Memcached 1.4.31

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2016-8704"
    }
  },
  "description": "Memcached\u662f\u4e00\u4e2a\u9ad8\u6027\u80fd\u7684\u5206\u5e03\u5f0f\u5185\u5b58\u5bf9\u8c61\u7f13\u5b58\u7cfb\u7edf\uff0c\u7528\u4e8e\u52a8\u6001Web\u5e94\u7528\u4ee5\u51cf\u8f7b\u6570\u636e\u5e93\u8d1f\u8f7d\u3002 \r\n\r\nMemcached Append/Prepend\u5b58\u5728\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\u3002process_bin_append_prepend\u51fd\u6570\u5904\u7406Memcached\u4e8c\u8fdb\u5236\u534f\u8bae\u7684\u591a\u4e2a\u547d\u4ee4\u88ab\u6ee5\u7528\u65f6\u53ef\u5bfc\u81f4\u5806\u6ea2\u51fa\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u5229\u7528\u6f0f\u6d1e\u53ef\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002",
  "discovererName": "Aleksandar Nikolic of Cisco Talos",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u65b0\u7248\u672c\u4fee\u590d\u8be5\u6f0f\u6d1e\uff0c\u8bf7\u5347\u7ea7\u81f3\u5b98\u65b9\u6700\u65b0\u7248\u672c\uff1ahttp://www.memcached.org/files/memcached-1.4.33.tar.gz",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2016-10468",
  "openTime": "2016-11-01",
  "patchDescription": "Memcached\u662f\u4e00\u4e2a\u9ad8\u6027\u80fd\u7684\u5206\u5e03\u5f0f\u5185\u5b58\u5bf9\u8c61\u7f13\u5b58\u7cfb\u7edf\uff0c\u7528\u4e8e\u52a8\u6001Web\u5e94\u7528\u4ee5\u51cf\u8f7b\u6570\u636e\u5e93\u8d1f\u8f7d\u3002 \r\n\r\nMemcached Append/Prepend\u5b58\u5728\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\u3002process_bin_append_prepend\u51fd\u6570\u5904\u7406Memcached\u4e8c\u8fdb\u5236\u534f\u8bae\u7684\u591a\u4e2a\u547d\u4ee4\u88ab\u6ee5\u7528\u65f6\u53ef\u5bfc\u81f4\u5806\u6ea2\u51fa\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u5229\u7528\u6f0f\u6d1e\u53ef\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Memcached Append/Prepend\u5b58\u5728\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Memcached Memcached 1.4.31"
  },
  "referenceLink": "http://www.talosintelligence.com/reports/TALOS-2016-0219/",
  "serverity": "\u9ad8",
  "submitTime": "2016-11-01",
  "title": "Memcached Append/Prepend\u5b58\u5728\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e"
}

FKIE_CVE-2016-8704

Vulnerability from fkie_nvd - Published: 2017-01-06 21:59 - Updated: 2026-06-17 00:54

Severity

9.8 (Critical) - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 (Critical) - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

References

URL	Tags
talos-cna@cisco.com	http://rhn.redhat.com/errata/RHSA-2016-2819.html
talos-cna@cisco.com	http://rhn.redhat.com/errata/RHSA-2016-2820.html
talos-cna@cisco.com	http://www.debian.org/security/2016/dsa-3704
talos-cna@cisco.com	http://www.securityfocus.com/bid/94083
talos-cna@cisco.com	http://www.securitytracker.com/id/1037333
talos-cna@cisco.com	http://www.talosintelligence.com/reports/TALOS-2016-0219/	Exploit, Technical Description, Third Party Advisory, VDB Entry
talos-cna@cisco.com	https://access.redhat.com/errata/RHSA-2017:0059
talos-cna@cisco.com	https://security.gentoo.org/glsa/201701-12
af854a3a-2127-422b-91ae-364da2661108	http://rhn.redhat.com/errata/RHSA-2016-2819.html
af854a3a-2127-422b-91ae-364da2661108	http://rhn.redhat.com/errata/RHSA-2016-2820.html
af854a3a-2127-422b-91ae-364da2661108	http://www.debian.org/security/2016/dsa-3704
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/94083
af854a3a-2127-422b-91ae-364da2661108	http://www.securitytracker.com/id/1037333
af854a3a-2127-422b-91ae-364da2661108	http://www.talosintelligence.com/reports/TALOS-2016-0219/	Exploit, Technical Description, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	https://access.redhat.com/errata/RHSA-2017:0059
af854a3a-2127-422b-91ae-364da2661108	https://security.gentoo.org/glsa/201701-12

Impacted products

	Vendor	Product	Version
	memcached	memcached	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "Memcached",
          "vendor": "Memcached",
          "versions": [
            {
              "status": "affected",
              "version": "1.4.31"
            }
          ]
        }
      ],
      "source": "talos-cna@cisco.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:memcached:memcached:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A3865AAC-C676-4002-98CC-49C199D55C0E",
              "versionEndIncluding": "1.4.31",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An integer overflow in the process_bin_append_prepend function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution."
    },
    {
      "lang": "es",
      "value": "Un desbordamiento de entero en la funci\u00f3n process_bin_update en Memcached, que es responsable de procesar m\u00faltiples comandos de protocolo binario Memcached, puede ser abusado para provocar desbordamiento en la memoria din\u00e1mica y conducir a la ejecuci\u00f3n remota de c\u00f3digo."
    }
  ],
  "id": "CVE-2016-8704",
  "lastModified": "2026-06-17T00:54:50.973",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "talos-cna@cisco.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2017-01-06T21:59:01.790",
  "references": [
    {
      "source": "talos-cna@cisco.com",
      "url": "http://rhn.redhat.com/errata/RHSA-2016-2819.html"
    },
    {
      "source": "talos-cna@cisco.com",
      "url": "http://rhn.redhat.com/errata/RHSA-2016-2820.html"
    },
    {
      "source": "talos-cna@cisco.com",
      "url": "http://www.debian.org/security/2016/dsa-3704"
    },
    {
      "source": "talos-cna@cisco.com",
      "url": "http://www.securityfocus.com/bid/94083"
    },
    {
      "source": "talos-cna@cisco.com",
      "url": "http://www.securitytracker.com/id/1037333"
    },
    {
      "source": "talos-cna@cisco.com",
      "tags": [
        "Exploit",
        "Technical Description",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.talosintelligence.com/reports/TALOS-2016-0219/"
    },
    {
      "source": "talos-cna@cisco.com",
      "url": "https://access.redhat.com/errata/RHSA-2017:0059"
    },
    {
      "source": "talos-cna@cisco.com",
      "url": "https://security.gentoo.org/glsa/201701-12"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://rhn.redhat.com/errata/RHSA-2016-2819.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://rhn.redhat.com/errata/RHSA-2016-2820.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2016/dsa-3704"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/94083"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id/1037333"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Technical Description",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.talosintelligence.com/reports/TALOS-2016-0219/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://access.redhat.com/errata/RHSA-2017:0059"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://security.gentoo.org/glsa/201701-12"
    }
  ],
  "sourceIdentifier": "talos-cna@cisco.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-190"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-5HM6-WPG3-FV45

Vulnerability from github – Published: 2022-05-13 01:01 – Updated: 2025-04-20 03:30

Details

Severity

9.8 (Critical)


                  
                    CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2016-8704"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-190"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2017-01-06T21:59:00Z",
    "severity": "CRITICAL"
  },
  "details": "An integer overflow in the process_bin_append_prepend function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.",
  "id": "GHSA-5hm6-wpg3-fv45",
  "modified": "2025-04-20T03:30:50Z",
  "published": "2022-05-13T01:01:11Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-8704"
    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2017:0059"
    },
    {
      "type": "WEB",
      "url": "https://security.gentoo.org/glsa/201701-12"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2016-2819.html"
    },
    {
      "type": "WEB",
      "url": "http://rhn.redhat.com/errata/RHSA-2016-2820.html"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2016/dsa-3704"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/94083"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id/1037333"
    },
    {
      "type": "WEB",
      "url": "http://www.talosintelligence.com/reports/TALOS-2016-0219"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2016-8704

Vulnerability from gsd - Updated: 2023-12-13 01:21

Details

Aliases

CVE-2016-8704

Aliases

CVE-2016-8704

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2016-8704",
    "description": "An integer overflow in the process_bin_append_prepend function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.",
    "id": "GSD-2016-8704",
    "references": [
      "https://www.suse.com/security/cve/CVE-2016-8704.html",
      "https://www.debian.org/security/2016/dsa-3704",
      "https://access.redhat.com/errata/RHSA-2017:0059",
      "https://access.redhat.com/errata/RHSA-2016:2820",
      "https://access.redhat.com/errata/RHSA-2016:2819",
      "https://ubuntu.com/security/CVE-2016-8704",
      "https://advisories.mageia.org/CVE-2016-8704.html",
      "https://security.archlinux.org/CVE-2016-8704",
      "https://alas.aws.amazon.com/cve/html/CVE-2016-8704.html",
      "https://linux.oracle.com/cve/CVE-2016-8704.html",
      "https://packetstormsecurity.com/files/cve/CVE-2016-8704"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2016-8704"
      ],
      "details": "An integer overflow in the process_bin_append_prepend function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.",
      "id": "GSD-2016-8704",
      "modified": "2023-12-13T01:21:22.800096Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "talos-cna@cisco.com",
        "ID": "CVE-2016-8704",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Memcached",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "1.4.31"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Memcached"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "An integer overflow in the process_bin_append_prepend function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution."
          }
        ]
      },
      "impact": {
        "cvss": {
          "baseScore": 9.8,
          "baseSeverity": "Critical",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.0"
        }
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "integer overflow"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "GLSA-201701-12",
            "refsource": "GENTOO",
            "url": "https://security.gentoo.org/glsa/201701-12"
          },
          {
            "name": "DSA-3704",
            "refsource": "DEBIAN",
            "url": "http://www.debian.org/security/2016/dsa-3704"
          },
          {
            "name": "RHSA-2016:2819",
            "refsource": "REDHAT",
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2819.html"
          },
          {
            "name": "94083",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/94083"
          },
          {
            "name": "RHSA-2016:2820",
            "refsource": "REDHAT",
            "url": "http://rhn.redhat.com/errata/RHSA-2016-2820.html"
          },
          {
            "name": "RHSA-2017:0059",
            "refsource": "REDHAT",
            "url": "https://access.redhat.com/errata/RHSA-2017:0059"
          },
          {
            "name": "1037333",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id/1037333"
          },
          {
            "name": "http://www.talosintelligence.com/reports/TALOS-2016-0219/",
            "refsource": "MISC",
            "url": "http://www.talosintelligence.com/reports/TALOS-2016-0219/"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:memcached:memcached:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "1.4.31",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "talos-cna@cisco.com",
          "ID": "CVE-2016-8704"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "An integer overflow in the process_bin_append_prepend function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-190"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.talosintelligence.com/reports/TALOS-2016-0219/",
              "refsource": "MISC",
              "tags": [
                "Exploit",
                "Technical Description",
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://www.talosintelligence.com/reports/TALOS-2016-0219/"
            },
            {
              "name": "94083",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/94083"
            },
            {
              "name": "DSA-3704",
              "refsource": "DEBIAN",
              "tags": [],
              "url": "http://www.debian.org/security/2016/dsa-3704"
            },
            {
              "name": "RHSA-2016:2820",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2820.html"
            },
            {
              "name": "RHSA-2016:2819",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://rhn.redhat.com/errata/RHSA-2016-2819.html"
            },
            {
              "name": "GLSA-201701-12",
              "refsource": "GENTOO",
              "tags": [],
              "url": "https://security.gentoo.org/glsa/201701-12"
            },
            {
              "name": "1037333",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://www.securitytracker.com/id/1037333"
            },
            {
              "name": "RHSA-2017:0059",
              "refsource": "REDHAT",
              "tags": [],
              "url": "https://access.redhat.com/errata/RHSA-2017:0059"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 7.5,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 5.9
        }
      },
      "lastModifiedDate": "2022-04-19T20:15Z",
      "publishedDate": "2017-01-06T21:59Z"
    }
  }
}

OPENSUSE-SU-2024:10021-1

Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00

Summary

memcached-1.4.33-1.1 on GA media

Severity

Moderate

Scope

9 vulnerabilities in this advisory, including CVE-2016-8704.

CVE-2016-8704

9.8 (Critical)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Recommended: 8 products

Open the full advisory

RHSA-2016:2819

Vulnerability from csaf_redhat - Published: 2016-11-23 07:47 - Updated: 2026-06-30 11:41

Summary

Red Hat Security Advisory: memcached security update

Severity

Important

Scope

3 vulnerabilities in this advisory, including CVE-2016-8704.

CVE-2016-8704

An integer overflow flaw, leading to a heap-based buffer overflow, was found in the memcached binary protocol. An attacker could create a specially crafted message that would cause the memcached server to crash or, potentially, execute arbitrary code.

9.8 (Critical)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Fixed: 46 products

https://access.redhat.com/errata/RHSA-2016:2819

Open the full advisory

RHSA-2016:2820

Vulnerability from csaf_redhat - Published: 2016-11-23 07:47 - Updated: 2026-06-30 11:41

Summary

Red Hat Security Advisory: memcached security update

Severity

Important

Scope

2 vulnerabilities in this advisory, including CVE-2016-8704.

CVE-2016-8704

9.8 (Critical)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Fixed: 43 products

https://access.redhat.com/errata/RHSA-2016:2820

Open the full advisory

RHSA-2016_2819

Vulnerability from csaf_redhat - Published: 2016-11-23 07:47 - Updated: 2024-11-22 10:30

Summary

Red Hat Security Advisory: memcached security update

Severity

Important

Scope

3 vulnerabilities in this advisory, including CVE-2016-8704.

CVE-2016-8704

9.8 (Critical)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Fixed: 132 products

https://access.redhat.com/errata/RHSA-2016:2819

Open the full advisory

RHSA-2016_2820

Vulnerability from csaf_redhat - Published: 2016-11-23 07:47 - Updated: 2024-11-22 10:28

Summary

Red Hat Security Advisory: memcached security update

Severity

Important

Scope

2 vulnerabilities in this advisory, including CVE-2016-8704.

CVE-2016-8704

9.8 (Critical)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Fixed: 102 products

https://access.redhat.com/errata/RHSA-2016:2820

Open the full advisory

RHSA-2017:0059

Vulnerability from csaf_redhat - Published: 2017-01-11 16:30 - Updated: 2026-06-30 11:41

Summary

Red Hat Security Advisory: Red Hat Mobile Application Platform 4.2.1 Security Update - SDKs and RPMs

Severity

Moderate

Scope

2 vulnerabilities in this advisory, including CVE-2016-8704.

CVE-2016-8704

8.8 (High)


                
                  CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Fixed: 2 products

https://access.redhat.com/errata/RHSA-2017:0059

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2016-8704 (GCVE-0-2016-8704)

Tags

Sightings

Nomenclature

Related by attack behaviour