FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-03-29 07:54:42 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
86ada694-8b30-11de-b9d0-000c6e274733memcached -- memcached stats maps Information Disclosure Weakness

Secunia reports:

A weakness has been reported in memcached, which can be exploited by malicious people to disclose system information.

The weakness is caused due to the application disclosing the content of /proc/self/maps if a stats maps command is received. This can be exploited to disclose e.g. the addresses of allocated memory regions.


Discovery 2009-04-29
Entry 2009-08-17
memcached
< 1.2.8

CVE-2009-1255
http://secunia.com/advisories/34915/
f4bf713f-6ac7-4b76-8980-47bf90c5419fmemcached -- multiple vulnerabilities

Cisco Talos reports:

Multiple integer overflow vulnerabilities exist within Memcached that could be exploited to achieve remote code execution on the targeted system. These vulnerabilities manifest in various Memcached functions that are used in inserting, appending, prepending, or modifying key-value data pairs. Systems which also have Memcached compiled with support for SASL authentication are also vulnerable to a third flaw due to how Memcached handles SASL authentication commands.

An attacker could exploit these vulnerabilities by sending a specifically crafted Memcached command to the targeted server. Additionally, these vulnerabilities could also be exploited to leak sensitive process information which an attacker could use to bypass common exploitation mitigations, such as ASLR, and can be triggered multiple times. This enables reliable exploitation which makes these vulnerabilities severe.


Discovery 2016-10-31
Entry 2016-11-02
memcached
< 1.4.33

http://blog.talosintel.com/2016/10/memcached-vulnerabilities.html
CVE-2016-8704
CVE-2016-8705
CVE-2016-8706