SUSE-SU-2018:0839-1

CRITICAL9.1

Security update for memcached

Published Mar 29, 2018

Modified 1 months ago

Fix available

Details

Description of the patch:

This update for memcached fixes the following issues:

CVE-2017-9951: Fixed heap-based buffer over-read in try_read_command function which allowed remote attackers to cause a denial of service attack (bsc#1056865).

Affected Packages

memcached-devel

SUSE Linux Enterprise Desktop 12 SP2SUSE Linux Enterprise Server 12 SP2SUSE Linux Enterprise Server for SAP Applications 12 SP2SUSE Linux Enterprise Software Development Kit 12 SP2

Fixed in:

0:1.4.39-4.3.1

memcached

SUSE Linux Enterprise High Performance Computing 12 SP2SUSE Linux Enterprise High Performance Computing 12 SP3SUSE Linux Enterprise Server 12 SP3SUSE Linux Enterprise Server for Raspberry Pi 12 SP2SUSE Linux Enterprise Server for SAP Applications 12 SP3

Fixed in:

0:1.4.39-4.3.1

References

ADVISORY

https://bugzilla.suse.com/1056865

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2018-March/003853.html

ADVISORY

https://www.suse.com/security/cve/CVE-2017-9951/

WEB

https://www.suse.com/support/security/rating/

ADVISORY