Ubuntu 16.10 USN-3120-1 Critical: Memcached Remote Code Execution

ubuntu

November 2, 2016

Memcached could be made to crash or run programs if it received specially crafted network traffic.

Summary

Memcached could be made to crash or run programs if it received specially

crafted network traffic.

Software Description:

- memcached: high-performance memory object caching system

Details:

Aleksandar Nikolic discovered that Memcached incorrectly handled certain

malformed commands. A remote attacker could use this issue to cause

Memcached to crash, resulting in a denial of service, or possibly execute

arbitrary code.

Topics Covered

security advisory denial of service critical Ubuntu memcached

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.10:
  memcached                       1.4.25-2ubuntu2.1

Ubuntu 16.04 LTS:
  memcached                       1.4.25-2ubuntu1.2

Ubuntu 14.04 LTS:
  memcached                       1.4.14-0ubuntu9.1

Ubuntu 12.04 LTS:
  memcached                       1.4.13-0ubuntu2.2

In general, a standard system update will make all the necessary changes.