Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia: 2019-0232 Patched Denial of Service Vulnerability in memcached

mageia
Calendar Grey August 31, 2019
Dist Mageia Esm H88
Mageia 2020-0456 resolves a vulnerability in nginx, correcting a buffer overflow that results in application crashes.
AUpdated memcached packages fix security vulnerability: In memcached before 1.5.14, a NULL pointer dereference was found in the "lru mode" and "lru temp_ttl" commands

Summary

AUpdated memcached packages fix security vulnerability:
In memcached before 1.5.14, a NULL pointer dereference was found in the "lru mode" and "lru temp_ttl" commands. This causes a denial of service when parsing crafted lru command messages in process_lru_command in memcached.c (CVE-2019-11596).

References

- https://bugs.mageia.org/show_bug.cgi?id=25267

- https://ubuntu.com/security/notices/USN-3963-1

- https://www.cve.org/CVERecord?id=CVE-2019-11596

Topics%20covered

Topics Covered

security advisory denial of service update software fix NULL pointer memcached Mageia

Resolution

SRPMS

- 7/core/memcached-1.5.16-1.mga7

- 6/core/memcached-1.5.16-1.mga6

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 31 Aug 2019
URL: https://advisories.mageia.org/MGASA-2019-0232.html
Type: security
CVE: CVE-2019-11596

Topics%20covered

Topics Covered

security advisory denial of service update software fix NULL pointer memcached Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here