CVE-2017-9951

The try_read_command function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service (segmentation fault) via a request…

published July 17, 2017

CVSS
—
EPSS
4%
Percentile
90.8
In the wild
Unconfirmed
What it is

The try_read_command function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service (segmentation fault) via a request to add/set a key, which makes a comparison between signed and unsigned int and triggers a heap-based buffer over-read. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8705.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04166 · 90.8th percentile
Published
2017-07-17T06:00Z
EPSS history
Timeline
  • 17 JUL 06:00Z
    The try_read_command function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service (segmentation fault) via a request…
    cvelistv5