Intrusion PreventionMemcached.Process.bin.update.body.len.Integer.Overflow
Description
This indicates an attack attempt against an Integer Overflow vulnerability in memcached.
The vulnerability is caused by an error when the vulnerable software handles multiple commands and the body_len parameter of a Memcached
binary protocol packet. A remote unauthenticated attacker may be able to exploit this to execute arbitrary code in the context of the user.
Affected Products
Memcached Project Memcached prior to 1.4.33
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the latest update from the vendor.
https://github.com/memcached/memcached/wiki/ReleaseNotes1433
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2019-06-10 | 14.629 | Severity:high:critical |
| ID | 43451 |
| Created | Dec 08, 2016 |
| Updated | Jun 07, 2019 |
| Risk |
|
| CVE ID | CVE-2016-8705 |
| Exploit Prediction Score | 86.73% |
| Default Action | drop |
| Active | |
| Affected OS | Other |
| Affected App | Other |