{"id":"CVE-2016-8706","aliases":["ALPINE-CVE-2016-8706","DEBIAN-CVE-2016-8706","DLA-701-1","DSA-3704-1","EUVD-2016-9545","GHSA-xj8f-h9rc-62vh","MGASA-2016-0381","RHSA-2016:2819","SUSE-SU-2018:0778-1","SUSE-SU-2018:0807-1","UBUNTU-CVE-2016-8706","USN-3120-1","openSUSE-SU-2024:10021-1"],"status":"published","title":"An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for...","description":"An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.","severity":{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.45703,"percentile":0.98805,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2016-11-02T00:00:00Z","modified":"2026-10-24T10:30:50Z","exploits":[{"source":"nuclei","id":"CVE-2016-8706","title":"Memcached Server SASL Authentication - Remote Code Execution","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2016/CVE-2016-8706.yaml"}],"fixes":[{"ecosystem":"Alpine:v3.4","package":"memcached","fixed_in":["1.4.33-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"memcached","fixed_in":["1.4.33-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"memcached","fixed_in":["1.4.33-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"memcached","fixed_in":["1.4.33-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"memcached","fixed_in":["1.4.33-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"memcached","fixed_in":["1.4.14-0ubuntu9.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"memcached","fixed_in":["1.4.25-2ubuntu1.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.4","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.33-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.33-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.33-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.33-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.33-1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.13-0.2+deb7u2"}]}],"versions":["1.4.13-0.2","1.4.13-0.2+deb7u1"],"bundled":4},{"source":"osv","ecosystem":"Debian:8","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.21-1.1+deb8u1"}]}],"versions":["1.4.21-1.1"],"bundled":3},{"source":"osv","ecosystem":"Mageia:5","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.25-1.mga5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.15-10.el7_3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"memcached-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.15-10.el7_3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"memcached-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.15-10.el7_3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.15-10.el7_3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"memcached-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.15-10.el7_3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"memcached-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.15-10.el7_3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.15-10.el7_3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"memcached-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.15-10.el7_3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"memcached-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.15-10.el7_3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.15-10.el7_3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"memcached-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.15-10.el7_3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"memcached-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.15-10.el7_3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.39-3.3.2"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.39-3.3.2"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.39-3.3.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.14-0ubuntu9.1"}]}],"versions":["1.4.14-0ubuntu4","1.4.14-0ubuntu8","1.4.14-0ubuntu9"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.25-2ubuntu1.2"}]}],"versions":["1.4.24-2ubuntu1","1.4.25-1ubuntu2","1.4.25-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.14-0ubuntu9.1"}]}],"versions":["1.4.14-0ubuntu4","1.4.14-0ubuntu8","1.4.14-0ubuntu9"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.25-2ubuntu1.2"}]}],"versions":["1.4.24-2ubuntu1","1.4.25-1ubuntu2","1.4.25-2ubuntu1"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"memcached","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.33-1.1"}]}],"bundled":9}],"products":[{"vendor":"memcached","product":"memcached"}],"references":[{"url":"https://security.gentoo.org/glsa/201701-12","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3704","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2819.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://www.securityfocus.com/bid/94083","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://www.securitytracker.com/id/1037333","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"http://www.talosintelligence.com/reports/TALOS-2016-0221/","tags":["x_refsource_MISC","x_transferred","Exploit","Technical Description","Third Party Advisory","VDB Entry","evidence","article","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8706","tags":["advisory"]},{"url":"http://www.talosintelligence.com/reports/TALOS-2016-0221"},{"url":"https://github.com/advisories/GHSA-xj8f-h9rc-62vh"},{"url":"https://security.alpinelinux.org/vuln/CVE-2016-8706","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-8706","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2016-0381.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=19689","tags":["report"]},{"url":"https://www.ubuntu.com/usn/usn-3120-1/","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2016:2819","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1390510","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1390511","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1390512","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2819.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8704","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8704","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8704","tags":["advisory"]},{"url":"http://www.talosintelligence.com/reports/TALOS-2016-0219/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8705","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8705","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-8705","tags":["advisory"]},{"url":"http://www.talosintelligence.com/reports/TALOS-2016-0220/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-8706","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-8706","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180778-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1007869","tags":["report"]},{"url":"https://bugzilla.suse.com/1007870","tags":["report"]},{"url":"https://bugzilla.suse.com/1007871","tags":["report"]},{"url":"https://bugzilla.suse.com/1056865","tags":["report"]},{"url":"https://bugzilla.suse.com/798458","tags":["report"]},{"url":"https://bugzilla.suse.com/817781","tags":["report"]},{"url":"https://bugzilla.suse.com/857188","tags":["report"]},{"url":"https://bugzilla.suse.com/858676","tags":["report"]},{"url":"https://bugzilla.suse.com/858677","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7239","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7290","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-7291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8706","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9951","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180807-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-8706","tags":["report"]},{"url":"http://blog.talosintel.com/2016/10/memcached-vulnerabilities.html","tags":["report"]},{"url":"https://github.com/memcached/memcached/wiki/ReleaseNotes1433","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3120-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-8704","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-8705","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1494","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2016-8706","description":"An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.","status":"published","published":"2017-01-06T21:00:00Z","modified":"2024-08-06T02:27:41.304Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"updated_at":"2026-11-02T14:33:32.724067Z"}],"euvd":[{"id":"EUVD-2016-9545","description":"An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.","status":"published","published":"2017-01-06T21:00:00Z","modified":"2024-08-06T02:27:41Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T02:22:29.639634Z"}],"ghsa":[{"id":"GHSA-xj8f-h9rc-62vh","title":"An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for...","description":"An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.","status":"published","published":"2022-05-13T01:01:11Z","modified":"2025-04-20T03:31:54Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:01:38.976438Z"}],"nvd":[{"id":"CVE-2016-8706","description":"An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.","status":"published","published":"2017-01-06T21:59:01.853Z","modified":"2026-06-17T00:54:51.22Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:03:33.686843Z"}],"osv":[{"id":"ALPINE-CVE-2016-8706","description":"An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.","status":"published","published":"2017-01-06T21:59:01.853Z","modified":"2026-09-22T06:30:08.569857294Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:46.716249Z"},{"id":"CVE-2016-8706","description":"An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.","status":"published","published":"2017-01-06T21:59:01.853Z","modified":"2026-10-24T10:30:50.045156257Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:03.171316Z"},{"id":"DEBIAN-CVE-2016-8706","description":"An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.","status":"published","published":"2017-01-06T21:59:01.853Z","modified":"2026-09-22T07:02:36.912655633Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:28.207321Z"},{"id":"RHSA-2016:2819","title":"Red Hat Security Advisory: memcached security update","status":"published","published":"2024-09-15T23:49:16Z","modified":"2026-07-01T10:01:28Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"UBUNTU-CVE-2016-8706","description":"An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.","status":"published","published":"2016-11-02T00:00:00Z","modified":"2026-02-04T03:23:11.329218Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:12.994319Z"},{"id":"DLA-701-1","title":"memcached - security update","status":"published","published":"2016-11-05T00:00:00Z","modified":"2026-03-09T02:11:43.542479Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"DSA-3704-1","title":"memcached - security update","status":"published","published":"2016-11-03T00:00:00Z","modified":"2026-03-09T01:21:27.271454Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2016-0381","title":"Updated memcached packages fix security vulnerability","description":"Aleksandar Nikolic discovered that Memcached incorrectly handled certain\nmalformed commands. A remote attacker could use this issue to cause\nMemcached to crash, resulting in a denial of service, or possibly\nexecute arbitrary code (CVE-2016-8704, CVE-2016-8705, CVE-2016-8706).\n","status":"published","published":"2016-11-17T16:37:05Z","modified":"2026-04-16T06:24:44.534357151Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"openSUSE-SU-2024:10021-1","title":"memcached-1.4.33-1.1 on GA media","description":"These are all security issues fixed in the memcached-1.4.33-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:05:40.069602Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"SUSE-SU-2018:0778-1","title":"Security update for memcached","description":"This update for memcached fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2011-4971: remote DoS (bsc#817781).\n- CVE-2013-0179: DoS when printing out keys to be deleted in  verbose mode (bsc#798458).\n- CVE-2013-7239: SASL authentication allows wrong credentials to access memcache (bsc#857188).\n- CVE-2013-7290: remote DoS (segmentation fault) via a request to delete a key (bsc#858677).\n- CVE-2013-7291: remote DoS (crash) via a request that triggers 'unbounded key print' (bsc#858676).\n- CVE-2016-8704: Server append/prepend remote code execution (bsc#1007871).\n- CVE-2016-8705: Server update remote code execution (bsc#1007870).\n- CVE-2016-8706: Server ASL authentication remote code execution (bsc#1007869).\n- CVE-2017-9951: Heap-based buffer over-read in try_read_command function (incomplete fix for CVE-2016-8705) (bsc#1056865).\n","status":"published","published":"2018-03-22T13:15:48Z","modified":"2026-02-04T04:08:13.355547Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:0807-1","title":"Security update for memcached","description":"This update for memcached fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2011-4971: remote DoS (bsc#817781).\n- CVE-2013-0179: DoS when printing out keys to be deleted in  verbose mode (bsc#798458).\n- CVE-2013-7239: SASL authentication allows wrong credentials to access memcache (bsc#857188).\n- CVE-2013-7290: remote DoS (segmentation fault) via a request to delete a key (bsc#858677).\n- CVE-2013-7291: remote DoS (crash) via a request that triggers 'unbounded key print' (bsc#858676).\n- CVE-2016-8704: Server append/prepend remote code execution (bsc#1007871).\n- CVE-2016-8705: Server update remote code execution (bsc#1007870).\n- CVE-2016-8706: Server ASL authentication remote code execution (bsc#1007869).\n- CVE-2017-9951: Heap-based buffer over-read in try_read_command function (incomplete fix for CVE-2016-8705) (bsc#1056865).\n","status":"published","published":"2018-03-26T09:47:34Z","modified":"2026-02-04T03:07:58.794706Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"USN-3120-1","title":"memcached vulnerabilities","description":"Aleksandar Nikolic discovered that Memcached incorrectly handled certain\nmalformed commands. A remote attacker could use this issue to cause\nMemcached to crash, resulting in a denial of service, or possibly execute\narbitrary code.\n","status":"published","published":"2016-11-02T14:13:41Z","modified":"2026-02-10T04:41:02Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}