CVE-2016-8706

HIGHNuclei

Memcached Server SASL Authentication - Remote Code Execution

Title source: github.com
STIX 2.1 vulnerability

Record summary

CVE-2016-8706 has a selected CVSS score of 8.1 (high); EIP currently links 1 Nuclei template.

Description

An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

Memcached

Browse Memcached / Memcached
CVE List1.4.31affected

Nuclei templates

1
ProjectDiscoveryHIGHMemcached Server SASL Authentication - Remote Code ExecutionCVSS 8.1

An integer overflow in process_bin_sasl_auth function in Memcached, which is responsible for authentication commands of Memcached binary protocol, can be abused to cause heap overflow and lead to remote code execution.

Impact

Attackers can trigger heap overflow in the SASL authentication function, potentially achieving remote code execution on Memcached servers.

Remediation

Upgrade Memcached to a version later than affected releases that properly handles integer overflow in SASL authentication.

WeaknessesCWE-190
Authorspussycat0x
Template tagscvecve2016rcejsmemcachedvuln
CVSS vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:memcached:memcached:*:*:*:*:*:*:*:*
https://github.com/Medicean/VulApps/blob/master/m/memcached/cve-2016-8706/poc.py https://nvd.nist.gov/vuln/detail/CVE-2016-8706 http://rhn.redhat.com/errata/RHSA-2016-2819.html http://www.debian.org/security/2016/dsa-3704 http://www.securitytracker.com/id/1037333

Source: ProjectDiscovery

References

7