memcached Verbose Mode Denial of Service Vulnerability
BID:64978
Info
memcached Verbose Mode Denial of Service Vulnerability
| Bugtraq ID: | 64978 |
| Class: | Unknown |
| CVE: |
CVE-2013-0179 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 13 2014 12:00AM |
| Updated: | Apr 13 2015 09:55PM |
| Credit: | Jeremy Sowden |
| Vulnerable: |
Ubuntu Ubuntu Linux 13.10 Ubuntu Ubuntu Linux 13.04 Ubuntu Ubuntu Linux 12.10 Ubuntu Ubuntu Linux 12.04 LTS Oracle Solaris 11.2 Oracle Solaris 11.1 Memcached memcached 1.4.3 Memcached memcached 1.4.2 Memcached memcached 1.4.4 Mandriva Business Server 1 X86 64 Mandriva Business Server 1 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 Gentoo Linux |
| Not Vulnerable: |
Oracle Solaris 11.1.17.5.0 |
Discussion
memcached Verbose Mode Denial of Service Vulnerability
memcached is prone to a denial-of-service vulnerability.
Attackers can exploit this issue to crash the application, denying service to legitimate users.
memcached is prone to a denial-of-service vulnerability.
Attackers can exploit this issue to crash the application, denying service to legitimate users.
Exploit / POC
memcached Verbose Mode Denial of Service Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
memcached Verbose Mode Denial of Service Vulnerability
Solution:
Reportedly the issue is fixed, however Symantec has not confirmed this. Please contact the vendor for more information.
MandrakeSoft Enterprise Server 5 x86_64
MandrakeSoft Enterprise Server 5
Mandriva Business Server 1 X86 64
Solution:
Reportedly the issue is fixed, however Symantec has not confirmed this. Please contact the vendor for more information.
MandrakeSoft Enterprise Server 5 x86_64
-
Mandriva memcached-1.4.17-0.1mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva memcached-devel-1.4.17-0.1mdvmes5.2.x86_64.rpm
http://www.mandriva.com/en/downloads/
MandrakeSoft Enterprise Server 5
-
Mandriva memcached-1.4.17-0.1mdvmes5.2.i586.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva memcached-devel-1.4.17-0.1mdvmes5.2.i586.rpm
http://www.mandriva.com/en/downloads/
Mandriva Business Server 1 X86 64
-
Mandriva memcached-1.4.17-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/ -
Mandriva memcached-devel-1.4.17-1.mbs1.x86_64.rpm
http://www.mandriva.com/en/downloads/
References
memcached Verbose Mode Denial of Service Vulnerability
References:
References:
- Security Flaw CVE-2014-0037 (Seclists)
- Crash when performing deletion (google)
- CVE-2013-0179 Buffer Errors vulnerability in Memcached (Oracle)
- Multiple vulnerabilities in Memcached (Oracle)
- USN-2080-1: Memcached vulnerabilities (Ubuntu)
- Zarafa Homepage (Zarafa)