CVE-2011-4971 Multiple integer signedness errors in the (1) process_bin_sasl_auth, (2) process_bin_complete_sasl_auth, (3) process_bin_update, and (4) process_bin_append_prepend functions in Memcached 1.4.5 and ear...
MediumCVSS 5.0
EPSS 22.3%
Framework module
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple integer signedness errors in the (1) process_bin_sasl_auth, (2) process_bin_complete_sasl_auth, (3) process_bin_update, and (4) process_bin_append_prepend functions in Memcached 1.4.5 and earlier allow remote attackers to cause a denial of service (crash) via a large body length value in a packet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/memcached(Debian:12) | < 1.4.13-0.3 | 1.4.13-0.3 |
| debian/memcached(Debian:13) | < 1.4.13-0.3 | 1.4.13-0.3 |
| debian/memcached(Debian:14) | < 1.4.13-0.3 | 1.4.13-0.3 |
| memcached | <= 1.4.5 | No fix listed |
| memcached | = 1.2.7 | No fix listed |
| memcached | = 1.2.8 | No fix listed |
| memcached | = 1.4.0 | No fix listed |
| memcached | = 1.4.1 | No fix listed |
| memcached | = 1.4.2 | No fix listed |
| memcached | = 1.4.3 | No fix listed |
| memcached | = 1.4.4 | No fix listed |
References
- Debian Security Tracker CVE-2011-4971 vendor-advisory
- bugs.debian.org issue-tracking
- insecurety.net exploit
- 56183 third-party-advisory
- DSA-2832 vendor-advisory
- MDVSA-2013:280 vendor-advisory
- 59567 vdb-entry
- USN-2080-1 vendor-advisory
- code.google.com exploit patch
- puppet.com