[Secure-testing-team] Bug#868701: memcached: CVE-2017-9951: Heap-based buffer over-read in try_read_command function

[Salvatore Bonaccorso]

Source: memcached
Version: 1.4.33-1
Severity: important
Tags: security upstream

Hi,

the following vulnerability was published for memcached.

CVE-2017-9951[0]:
| The try_read_command function in memcached.c in memcached before 1.4.39
| allows remote attackers to cause a denial of service (segmentation
| fault) via a request to add/set a key, which makes a comparison between
| signed and unsigned int and triggers a heap-based buffer over-read.
| NOTE: this vulnerability exists because of an incomplete fix for
| CVE-2016-8705.

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2017-9951
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9951

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore