Security Bulletin: Vulnerabilities in Memcached affect IBM Tealeaf Customer Experience and IBM Tealeaf Customer Experience on Cloud Network Capture Add-On

Vulnerability Details

CVEID: CVE-2016-8705
DESCRIPTION: Memcached is vulnerable to a heap-based buffer overflow, caused by an integer overflow in the process_bin_update function. By using a specially-crafted command, a remote attacker could overflow a buffer and execute arbitrary code on the system.
CVSS Base Score: 9.8
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/118453 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

CVEID: CVE-2016-8706
DESCRIPTION: Memcached is vulnerable to a heap-based buffer overflow, caused by an integer overflow in the process_bin_sasl_auth function. By using a specially-crafted authentication command, a remote attacker could overflow a buffer and execute arbitrary code on the system.
CVSS Base Score: 8.1
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/118454 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)

CVEID: CVE-2016-8704
DESCRIPTION: Memcached is vulnerable to a heap-based buffer overflow, caused by an integer overflow in the process_bin_append_prepend function. By using a specially-crafted command, a remote attacker could overflow a buffer and execute arbitrary code on the system.
CVSS Base Score: 9.8
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/118447 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)