{"id":"CVE-2016-8705","aliases":["ALPINE-CVE-2016-8705","DEBIAN-CVE-2016-8705","DLA-701-1","DSA-3704-1","EUVD-2016-9544","GHSA-52x7-vqgq-5mww","MGASA-2016-0381","RHSA-2016:2819","RHSA-2016:2820","RHSA-2017:0059","SUSE-SU-2018:0778-1","SUSE-SU-2018:0807-1","SUSE-SU-2018:1601-1","UBUNTU-CVE-2016-8705","USN-3120-1","openSUSE-SU-2024:10021-1"],"status":"published","title":"Multiple integer overflows in process_bin_update function in Memcached, which is responsible for...","description":"Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.19854,"percentile":0.97436,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2016-11-02T00:00:00Z","modified":"2026-10-24T10:31:00Z","fixes":[{"ecosystem":"Alpine:v3.4","package":"memcached","fixed_in":["1.4.33-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"memcached","fixed_in":["1.4.33-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"memcached","fixed_in":["1.4.33-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"memcached","fixed_in":["1.4.33-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"memcached","fixed_in":["1.4.33-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"memcached","fixed_in":["1.4.14-0ubuntu9.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"memcached","fixed_in":["1.4.25-2ubuntu1.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.4","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.33-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.33-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.33-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.33-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.33-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.13-0.2+deb7u2"}]}],"versions":["1.4.13-0.2","1.4.13-0.2+deb7u1"],"bundled":4},{"source":"osv","ecosystem":"Debian:8","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.21-1.1+deb8u1"}]}],"versions":["1.4.21-1.1"],"bundled":3},{"source":"osv","ecosystem":"Mageia:5","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.25-1.mga5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.15-10.el7_3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"memcached-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.15-10.el7_3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"memcached-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.15-10.el7_3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.15-10.el7_3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"memcached-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.15-10.el7_3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"memcached-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.15-10.el7_3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.15-10.el7_3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"memcached-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.15-10.el7_3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"memcached-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.15-10.el7_3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.15-10.el7_3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"memcached-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.15-10.el7_3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"memcached-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.15-10.el7_3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.4-3.el6_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"memcached-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.4-3.el6_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"memcached-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.4-3.el6_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.4-3.el6_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"memcached-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.4-3.el6_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"memcached-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.4-3.el6_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.4-3.el6_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"memcached-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.4-3.el6_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"memcached-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.4-3.el6_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.4-3.el6_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"memcached-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.4-3.el6_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"memcached-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.4-3.el6_8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:mobile_application_platform:4.2","package":"rhmap-fh-openshift-templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-5.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.39-3.3.2"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.39-3.3.2"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.39-3.3.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-5.17.4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Studio Onsite 1.3","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-5.17.4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Studio Onsite Runner 1.3","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-5.17.4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.14-0ubuntu9.1"}]}],"versions":["1.4.14-0ubuntu4","1.4.14-0ubuntu8","1.4.14-0ubuntu9"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.25-2ubuntu1.2"}]}],"versions":["1.4.24-2ubuntu1","1.4.25-1ubuntu2","1.4.25-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.14-0ubuntu9.1"}]}],"versions":["1.4.14-0ubuntu4","1.4.14-0ubuntu8","1.4.14-0ubuntu9"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.25-2ubuntu1.2"}]}],"versions":["1.4.24-2ubuntu1","1.4.25-1ubuntu2","1.4.25-2ubuntu1"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.33-1.1"}]}],"bundled":9}],"products":[{"vendor":"memcached","product":"memcached"}],"references":[{"url":"https://security.gentoo.org/glsa/201701-12","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3704","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2819.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.securityfocus.com/bid/94083","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2820.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:0059","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.securitytracker.com/id/1037333","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"http://www.talosintelligence.com/reports/TALOS-2016-0220/","tags":["x_refsource_MISC","x_transferred","Exploit","Technical Description","Third Party Advisory","VDB Entry","evidence","article","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8705","tags":["advisory"]},{"url":"http://www.talosintelligence.com/reports/TALOS-2016-0220"},{"url":"https://github.com/advisories/GHSA-52x7-vqgq-5mww"},{"url":"https://security.alpinelinux.org/vuln/CVE-2016-8705","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-8705","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2016-0381.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=19689","tags":["report"]},{"url":"https://www.ubuntu.com/usn/usn-3120-1/","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2016:2819","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1390510","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1390511","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1390512","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2819.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8704","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8704","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8704","tags":["advisory"]},{"url":"http://www.talosintelligence.com/reports/TALOS-2016-0219/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8705","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8705","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8706","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8706","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8706","tags":["advisory"]},{"url":"http://www.talosintelligence.com/reports/TALOS-2016-0221/","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2016:2820","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2820.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/downloads/content/316/","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHMAP-11023","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0059.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180778-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1007869","tags":["report"]},{"url":"https://bugzilla.suse.com/1007870","tags":["report"]},{"url":"https://bugzilla.suse.com/1007871","tags":["report"]},{"url":"https://bugzilla.suse.com/1056865","tags":["report"]},{"url":"https://bugzilla.suse.com/798458","tags":["report"]},{"url":"https://bugzilla.suse.com/817781","tags":["report"]},{"url":"https://bugzilla.suse.com/857188","tags":["report"]},{"url":"https://bugzilla.suse.com/858676","tags":["report"]},{"url":"https://bugzilla.suse.com/858677","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7239","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7290","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9951","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180807-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181601-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-8705","tags":["report"]},{"url":"http://blog.talosintel.com/2016/10/memcached-vulnerabilities.html","tags":["report"]},{"url":"https://github.com/memcached/memcached/wiki/ReleaseNotes1433","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3120-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-8704","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-8706","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1494","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2016-8705","description":"Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.","status":"published","published":"2017-01-06T21:00:00Z","modified":"2024-08-06T02:27:41.285Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"updated_at":"2026-11-02T14:33:32.415289Z"}],"euvd":[{"id":"EUVD-2016-9544","description":"Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.","status":"published","published":"2017-01-06T21:00:00Z","modified":"2024-08-06T02:27:41Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T02:22:29.639634Z"}],"ghsa":[{"id":"GHSA-52x7-vqgq-5mww","title":"Multiple integer overflows in process_bin_update function in Memcached, which is responsible for...","description":"Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.","status":"published","published":"2022-05-13T01:01:10Z","modified":"2025-04-20T03:31:55Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:01:38.976438Z"}],"nvd":[{"id":"CVE-2016-8705","description":"Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.","status":"published","published":"2017-01-06T21:59:01.82Z","modified":"2026-06-17T00:54:51.097Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:03:33.686843Z"}],"osv":[{"id":"ALPINE-CVE-2016-8705","description":"Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.","status":"published","published":"2017-01-06T21:59:01.82Z","modified":"2026-09-22T06:30:37.363539031Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:27:46.716249Z"},{"id":"CVE-2016-8705","description":"Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.","status":"published","published":"2017-01-06T21:59:01.82Z","modified":"2026-10-24T10:31:00.314722137Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:03.171316Z"},{"id":"DEBIAN-CVE-2016-8705","description":"Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.","status":"published","published":"2017-01-06T21:59:01.82Z","modified":"2026-09-22T07:02:36.515988197Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:28.207321Z"},{"id":"RHSA-2016:2819","title":"Red Hat Security Advisory: memcached security update","status":"published","published":"2024-09-15T23:49:16Z","modified":"2026-07-01T10:01:28Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"RHSA-2016:2820","title":"Red Hat Security Advisory: memcached security update","status":"published","published":"2024-09-15T23:47:28Z","modified":"2026-07-01T10:01:28Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"RHSA-2017:0059","title":"Red Hat Security Advisory: Red Hat Mobile Application Platform 4.2.1 Security Update - SDKs and RPMs","status":"published","published":"2024-09-15T23:47:16Z","modified":"2026-07-01T10:01:34Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"UBUNTU-CVE-2016-8705","description":"Multiple integer overflows in process_bin_update function in Memcached, which is responsible for processing multiple commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.","status":"published","published":"2016-11-02T00:00:00Z","modified":"2026-02-04T04:20:20.636991Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:12.994319Z"},{"id":"DLA-701-1","title":"memcached - security update","status":"published","published":"2016-11-05T00:00:00Z","modified":"2026-03-09T02:11:43.542479Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"DSA-3704-1","title":"memcached - security update","status":"published","published":"2016-11-03T00:00:00Z","modified":"2026-03-09T01:21:27.271454Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2016-0381","title":"Updated memcached packages fix security vulnerability","description":"Aleksandar Nikolic discovered that Memcached incorrectly handled certain\nmalformed commands. A remote attacker could use this issue to cause\nMemcached to crash, resulting in a denial of service, or possibly\nexecute arbitrary code (CVE-2016-8704, CVE-2016-8705, CVE-2016-8706).\n","status":"published","published":"2016-11-17T16:37:05Z","modified":"2026-04-16T06:24:44.534357151Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"openSUSE-SU-2024:10021-1","title":"memcached-1.4.33-1.1 on GA media","description":"These are all security issues fixed in the memcached-1.4.33-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:05:40.069602Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"SUSE-SU-2018:0778-1","title":"Security update for memcached","description":"This update for memcached fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2011-4971: remote DoS (bsc#817781).\n- CVE-2013-0179: DoS when printing out keys to be deleted in  verbose mode (bsc#798458).\n- CVE-2013-7239: SASL authentication allows wrong credentials to access memcache (bsc#857188).\n- CVE-2013-7290: remote DoS (segmentation fault) via a request to delete a key (bsc#858677).\n- CVE-2013-7291: remote DoS (crash) via a request that triggers 'unbounded key print' (bsc#858676).\n- CVE-2016-8704: Server append/prepend remote code execution (bsc#1007871).\n- CVE-2016-8705: Server update remote code execution (bsc#1007870).\n- CVE-2016-8706: Server ASL authentication remote code execution (bsc#1007869).\n- CVE-2017-9951: Heap-based buffer over-read in try_read_command function (incomplete fix for CVE-2016-8705) (bsc#1056865).\n","status":"published","published":"2018-03-22T13:15:48Z","modified":"2026-02-04T04:08:13.355547Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:0807-1","title":"Security update for memcached","description":"This update for memcached fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2011-4971: remote DoS (bsc#817781).\n- CVE-2013-0179: DoS when printing out keys to be deleted in  verbose mode (bsc#798458).\n- CVE-2013-7239: SASL authentication allows wrong credentials to access memcache (bsc#857188).\n- CVE-2013-7290: remote DoS (segmentation fault) via a request to delete a key (bsc#858677).\n- CVE-2013-7291: remote DoS (crash) via a request that triggers 'unbounded key print' (bsc#858676).\n- CVE-2016-8704: Server append/prepend remote code execution (bsc#1007871).\n- CVE-2016-8705: Server update remote code execution (bsc#1007870).\n- CVE-2016-8706: Server ASL authentication remote code execution (bsc#1007869).\n- CVE-2017-9951: Heap-based buffer over-read in try_read_command function (incomplete fix for CVE-2016-8705) (bsc#1056865).\n","status":"published","published":"2018-03-26T09:47:34Z","modified":"2026-02-04T03:07:58.794706Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:1601-1","title":"Security update for memcached","description":"\nThis update fixes the following issues:\n  \n- CVE-2016-8705: Server update remote code execution (bsc#1007870).\n- CVE-2017-9951: Heap-based buffer over-read in try_read_command function (incomplete fix for CVE-2016-8705) (bsc#1056865).\n\n","status":"published","published":"2018-06-08T09:38:16Z","modified":"2026-02-04T02:45:44.763457Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"USN-3120-1","title":"memcached vulnerabilities","description":"Aleksandar Nikolic discovered that Memcached incorrectly handled certain\nmalformed commands. A remote attacker could use this issue to cause\nMemcached to crash, resulting in a denial of service, or possibly execute\narbitrary code.\n","status":"published","published":"2016-11-02T14:13:41Z","modified":"2026-02-10T04:41:02Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}