Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

SUSE: 2020:1381-1 Moderate: Memcached NULL Pointer and Buffer Flaw

suse
Calendar Grey May 22, 2020
Dist Suse Esm H88
SUSE has issued a security update for the memcached service that addresses two moderately severe vulnerabilities involving stack over-read and NULL pointer dereference risks
An update that fixes two vulnerabilities is now available

Summary

This update for memcached fixes the following issues: Security issue fixed: - CVE-2019-11596: Fixed a NULL pointer dereference in process_lru_command (bsc#1133817). - CVE-2019-15026: Fixed a stack-based buffer over-read (bsc#1149110). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Server Applications 15-SP1: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP1-2020-1381=1 Package List: - SUSE Linux Enterprise Module for Server Applications 15-SP1 (aarch64 ppc64le s390x x86_64): memcached-1.5.6-4.5.30 memcached-debuginfo-1.5.6-4.5.30 memcached-debugsource-1.5.6-4.5.30

Topics%20covered

Topics Covered

security advisory moderate NULL pointer SUSE buffer over-read memcached

References

#1133817 #1149110

Cross- CVE-2019-11596 CVE-2019-15026

Affected Products:

SUSE Linux Enterprise Module for Server Applications 15-SP1

https://www.suse.com/security/cve/CVE-2019-11596.html

https://www.suse.com/security/cve/CVE-2019-15026.html

https://bugzilla.suse.com/1133817

https://bugzilla.suse.com/1149110

Announcement ID: SUSE-SU-2020:1381-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate NULL pointer SUSE buffer over-read memcached

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here