memcached-1.4.15-10.el7.1
エラータID: AXSA:2016-957:03
リリース日:
2016/11/23 Wednesday - 12:52
題名:
memcached-1.4.15-10.el7.1
影響のあるチャネル:
Asianux Server 7 for x86_64
Severity:
High
Description:
[修正内容]
以下項目について対処しました。
[Security Fix]
- 現時点では CVE-2016-8704, CVE-2016-8705, CVE-2016-8706 の情報が公開されておりません。
CVE の情報が公開され次第情報をアップデートいたします。
一部CVEの翻訳文はJVNからの引用になります。
http://jvndb.jvn.jp/
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2016-8704
An integer overflow in the process_bin_append_prepend function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.
An integer overflow in the process_bin_append_prepend function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.
CVE-2016-8705
Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.
Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.
CVE-2016-8706
An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.
An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.
追加情報:
N/A
ダウンロード:
SRPMS
- memcached-1.4.15-10.el7.1.src.rpm
MD5: 6358c244c7ffcf62d4421e790685e083
SHA-256: 4acf32449688f4985423b60fc61a219fcbbec92648e8b839c396a5c4d901700b
Size: 336.62 kB
Asianux Server 7 for x86_64
- memcached-1.4.15-10.el7.1.x86_64.rpm
MD5: 02081a291bdabf234ae60d9273001b3c
SHA-256: 05850948eb6237eae640aa01ffe412e9dfd7056769f75af0f18ffea7f35263ae
Size: 84.15 kB
English