CVE-2016-8706

Impact:
Moderate
Public Date:
2016-10-31
Bugzilla:
1390512: CVE-2016-8706 memcached: SASL authentication remote code execution
An integer overflow flaw, leading to a heap-based buffer overflow, was found in memcached's parsing of SASL authentication messages. An attacker could create a specially crafted message that would cause the memcached server to crash or, potentially, execute arbitrary code.

Find out more about CVE-2016-8706 from the MITRE CVE dictionary dictionary and NIST NVD.

Statement

The version of memcached as shipped with Red Hat OpenStack Platform 9 is affected by this issue however will not be updated. The latest version of memcached from Red Hat Enterprise Linux 7 can safely be allowed to supersede the earlier versions provided in the Red Hat OpenStack Platform channels.

CVSS v2 metrics

Base Score 6.8
Base Metrics AV:N/AC:M/Au:N/C:P/I:P/A:P
Access Vector Network
Access Complexity Medium
Authentication None
Confidentiality Impact Partial
Integrity Impact Partial
Availability Impact Partial

CVSS v3 metrics

CVSS3 Base Score 8.1
CVSS3 Base Metrics CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector Network
Attack Complexity High
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality High
Integrity Impact High
Availability Impact High

Find out more about Red Hat support for the Common Vulnerability Scoring System (CVSS).

Red Hat Security Errata

Platform Errata Release Date
Red Hat Enterprise Linux 7 (memcached) RHSA-2016:2819 2016-11-23

Affected Packages State

Platform Package State
Red Hat OpenStack Platform 9.0 memcached Will not fix
Red Hat OpenStack Platform 8.0 (Liberty) memcached Not affected
Red Hat OpenStack Platform 10 memcached Not affected
Red Hat Mobile Application Platform On-Premise 4 memcached Not affected
Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7 memcached Not affected
Red Hat Enterprise Linux 6 memcached Not affected

Mitigation

This flaw requires memcached to be running with SASL authentication enabled, which is not the default setting. If your memcached instances are running without the "-S" command-line option, they are not vulnerable.

External References

Last Modified