This update of memcached fixes a signedness problem which may lead to a buffer too small to hold all data received from the network, this may allow arbitrary remote code execution. (CVE-2009-2415) Additionally an information leak was fixed (CVE-2009-1494, CVE-2009-1255 )

リモートホストで実行されているバージョンの memcached / MemcacheDB が、使用しているスタック、ヒープ、共有ライブラリメモリの場所に関する情報を明らかにします。認証されていないリモート攻撃者は、この弱点を利用してリモートホストのアドレス空間配置のランダム化 (ASLR) 保護を破り、バッファオーバーフローを簡単に悪用できる可能性があります。

遠端主機上執行的 memcached / MemcacheDB 版本會洩漏堆疊、堆積和它使用的共用程式庫記憶體位置相關資訊。未驗證的遠端攻擊者可能可以利用這個弱點擊敗遠端主機上的任何位址空間配置隨機化 (ASLR) 保護，藉此使緩衝區溢位更容易受到惡意利用。

远程主机上运行的 memcached / MemcacheDB 版本泄露关于其使用的堆栈、堆和共享库内存位置的信息。未经认证的远程攻击者可能会利用此漏洞破坏远程主机上的任何地址空间布局随机化 (ASLR) 保护，从而更加容易地利用缓冲区溢出。

- Wed Apr 29 2009 Paul Lindner <lindner at inuus.com> -     1.2.8-1

    - Upgrade to memcached-1.2.8

    - Addresses CVE-2009-1255

    - Wed Feb 25 2009 Fedora Release Engineering <rel-eng at       lists.fedoraproject.org> - 1.2.6-2

    - Rebuilt for       https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild

    - Tue Jul 29 2008 Paul Lindner <lindner at inuus.com> -       1.2.6-1

    - Upgrade to memcached-1.2.6

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of memcached / MemcacheDB running on the remote host reveals information about the stack, heap, and shared library memory locations it uses.  An unauthenticated remote attacker may be able to leverage this weakness to defeat any address space layout randomization (ASLR) protection on the remote host, thereby making buffer overflows easier to exploit.

- Wed Apr 29 2009 Paul Lindner <lindner at inuus.com> -     1.2.8-1

    - Upgrade to memcached-1.2.8

    - Addresses CVE-2009-1255

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Secunia reports :

A weakness has been reported in memcached, which can be exploited by malicious people to disclose system information.

The weakness is caused due to the application disclosing the content of /proc/self/maps if a stats maps command is received. This can be exploited to disclose e.g. the addresses of allocated memory regions.

The process_stat function in Memcached prior 1.2.8 discloses memory-allocation statistics in response to a stats malloc command, which allows remote attackers to obtain potentially sensitive information by sending this command to the daemon's TCP port (CVE-2009-1255, CVE-2009-1494).

The updated packages have been patched to prevent this.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
40545	openSUSE Security Update : memcached (memcached-1165)	Nessus	SuSE Local Security Checks	2009/8/11	2021/1/14	critical
38207	memcached / MemcacheDB ASLR バイパスの弱点	Nessus	Misc.	2009/4/29	2018/11/15	medium
38207	Memcached / MemcacheDB ASLR 繞過弱點	Nessus	Misc.	2009/4/29	2018/11/15	medium
38207	Memcached / MemcacheDB ASLR 绕过漏洞	Nessus	Misc.	2009/4/29	2018/11/15	medium
38835	Fedora 10 : memcached-1.2.8-1.fc10 (2009-4199)	Nessus	Fedora Local Security Checks	2009/5/20	2021/1/11	medium
38207	Memcached / MemcacheDB ASLR Bypass Weakness	Nessus	Misc.	2009/4/29	2018/11/15	medium
42022	openSUSE 10 Security Update : memcached (memcached-6397)	Nessus	SuSE Local Security Checks	2009/10/6	2021/1/14	critical
38916	Fedora 11 : memcached-1.2.8-1.fc11 (2009-4542)	Nessus	Fedora Local Security Checks	2009/5/27	2021/1/11	medium
40546	openSUSE Security Update : memcached (memcached-1165)	Nessus	SuSE Local Security Checks	2009/8/11	2021/1/14	critical
40660	FreeBSD : memcached -- memcached stats maps Information Disclosure Weakness (86ada694-8b30-11de-b9d0-000c6e274733)	Nessus	FreeBSD Local Security Checks	2009/8/20	2021/1/6	medium
38683	Mandriva Linux Security Advisory : memcached (MDVSA-2009:105)	Nessus	Mandriva Local Security Checks	2009/5/5	2021/1/6	medium

検出

プラグインの検索

critical

medium

medium

medium

medium

medium

critical

medium

critical

medium

medium