SUSE-SU-2018:0839-1

CRITICAL9.1

Security update for memcached

Published Mar 29, 2018

Modified 8 years ago

Fix available

Details

Description of the patch:

This update for memcached fixes the following issues:

CVE-2017-9951: Fixed heap-based buffer over-read in try_read_command function which allowed remote attackers to cause a denial of service attack (bsc#1056865).

Affected Packages

memcached-devel

SUSE Linux Enterprise Desktop 12 SP2SUSE Linux Enterprise Server 12 SP2SUSE Linux Enterprise Server for SAP Applications 12 SP2SUSE Linux Enterprise Software Development Kit 12 SP2

Fixed in:

1.4.39-4.3.1

memcached

SUSE Linux Enterprise Server 12 SP3SUSE Linux Enterprise Server for Raspberry Pi 12 SP2SUSE Linux Enterprise Server for SAP Applications 12 SP3

Fixed in:

1.4.39-4.3.1

References

ADVISORY

https://bugzilla.suse.com/1056865

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2018-March/003853.html

ADVISORY