drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Zwei Probleme in memcached
Name: |
Zwei Probleme in memcached |
|
ID: |
USN-3588-1 |
|
Distribution: |
Ubuntu |
|
Plattformen: |
Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 17.10 |
|
Datum: |
Di, 6. März 2018, 00:07 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1000115
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9951 |
|
Applikationen: |
memcached |
|
Originalnachricht |
--===============9168788929530862051== Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="RASg3xLB4tUQ4RcS" Content-Disposition: inline
--RASg3xLB4tUQ4RcS Content-Type: text/plain; charset=us-ascii Content-Disposition: inline
========================================================================== Ubuntu Security Notice USN-3588-1 March 05, 2018
memcached vulnerabilities ==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 17.10 - Ubuntu 16.04 LTS - Ubuntu 14.04 LTS
Summary:
Several security issues were fixed in Memcached.
Software Description: - memcached: high-performance memory object caching system
Details:
Daniel Shapira discovered an integer overflow issue in Memcached. A remote attacker could use this to cause a denial of service (daemon crash). (CVE-2017-9951)
It was discovered that Memcached listened to UDP by default. A remote attacker could use this as part of a distributed denial of service attack. (CVE-2018-1000115)
Update instructions:
The problem can be corrected by updating your system to the following package versions:
Ubuntu 17.10: memcached 1.4.33-1ubuntu3.2
Ubuntu 16.04 LTS: memcached 1.4.25-2ubuntu1.3
Ubuntu 14.04 LTS: memcached 1.4.14-0ubuntu9.2
In general, a standard system update will make all the necessary changes.
Please note that after applying this update, Memcached will no longer listen to UDP by default. If UDP service is desired, please add '-U 11211' to /etc/memcached.conf and restart the memcached service.
References: https://usn.ubuntu.com/usn/usn-3588-1 CVE-2017-9951, CVE-2018-1000115
Package Information: https://launchpad.net/ubuntu/+source/memcached/1.4.33-1ubuntu3.2 https://launchpad.net/ubuntu/+source/memcached/1.4.25-2ubuntu1.3 https://launchpad.net/ubuntu/+source/memcached/1.4.14-0ubuntu9.2
--RASg3xLB4tUQ4RcS Content-Type: application/pgp-signature; name="signature.asc"
-----BEGIN PGP SIGNATURE-----
iQIzBAABCgAdFiEEpgY7tWAjCaQ8jrvULwmejQBegfQFAlqddWYACgkQLwmejQBe gfQclBAAnjVF+jt3ntkvGd1nS0jfJf5mtRODWQiJRmaDJWYv6uCX+Zzb9W5kFryY +hy+Tuwne2ZK1/EZeE9dtrIeA4lZjU+Q93jL+18l6w24S80ggH7+EPokCE/2SFfc ClzFCKb5dg3gMekp5n1xSPE0O8Jab/0VzplVTu2Y1m81FRVJXMO2yX5OPs+kBcyc IAFnJIw4h/DAJoe2KyBJMDqgZdu7masPb0oLtEqIPbF3NRUQdPDAmzZy6cofeqou ygOQJ7Jyof5PrPD246LoMztNmHY+6qYWEhBchc6Zg0EZ8Re30sNoEFyBbSmcu5Fz eFxZ/6vlWITWWF8y+WLh7i+tXPt+cZjwFEYvIYnxqfgzw0E2D6EDJMrnJTs9H2FO mR9511SqX5W84KtKOtTlRBrJe7O+yDF0S9h4u++2+NGTcW8ZYebFf2UQAVA79f/8 e5zJOIXDffangaaKmz5/KxqoCxg1L8DlU4yImC/WFdSOZQMrOKVTeDEI2ptA+1x3 Lk0CNnhjArGh4y1WXVcIqrLF0yY7R7SyoAe6HPJp6FeDHu9j2kNQS1pxDORuyMKr dyaJgnvKiSf4xdpAvYmCPLwO2pZ/FgV0rfihO5oawnpvUqQioCYsb81iryXKVjl7 bnYWLtEEZnYy3ebuB/8+tZHkaNOx/PSqprdXiq/KhrG+ZNyjzn0= =qUYm -----END PGP SIGNATURE-----
--RASg3xLB4tUQ4RcS--
--===============9168788929530862051== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline
-- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce
|
|
|
|