SUSE-SU-2018:1326-1

Details

Description of the patch:

This update for memcached fixes the following issues:

CVE-2018-1000115: Insufficient Control of Network Message Volume (Network Amplification, CWE-406) vulnerability in the UDP support of the memcached server could result in denial of service via network flood (traffic amplification of 1:50,000 has been reported by reliable sources). (bsc#1083903)

Affected Packages

memcached

SUSE Linux Enterprise Desktop 11 SP4SUSE Linux Enterprise Server 11 SP4SUSE Linux Enterprise Server for SAP Applications 11 SP4SUSE Linux Enterprise Software Development Kit 11 SP4SUSE Studio Onsite 1.3

Fixed in:

1.2.6-5.17.3.1

References

ADVISORY

https://bugzilla.suse.com/1083903

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2018-May/004061.html

ADVISORY

https://www.suse.com/security/cve/CVE-2018-1000115/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2018/suse-su-20181326-1/