CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-9951

The try_read_command function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service (segmentation fault) via a request to add/set a key, which makes a comparison between signed and unsigned int and triggers a heap-based buffer over-read. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8705.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.009

EPSS Ranking 74.4%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2017-9951

Memcached » Memcached » Version: 1.2.7

cpe:2.3:a:memcached:memcached:1.2.7
Memcached » Memcached » Version: 1.2.8

cpe:2.3:a:memcached:memcached:1.2.8
Memcached » Memcached » Version: 1.4.0

cpe:2.3:a:memcached:memcached:1.4.0
Memcached » Memcached » Version: 1.4.1

cpe:2.3:a:memcached:memcached:1.4.1
Memcached » Memcached » Version: 1.4.10

cpe:2.3:a:memcached:memcached:1.4.10
Memcached » Memcached » Version: 1.4.11

cpe:2.3:a:memcached:memcached:1.4.11
Memcached » Memcached » Version: 1.4.12

cpe:2.3:a:memcached:memcached:1.4.12
Memcached » Memcached » Version: 1.4.13

cpe:2.3:a:memcached:memcached:1.4.13
Memcached » Memcached » Version: 1.4.14

cpe:2.3:a:memcached:memcached:1.4.14
Memcached » Memcached » Version: 1.4.15

cpe:2.3:a:memcached:memcached:1.4.15
Memcached » Memcached » Version: 1.4.16

cpe:2.3:a:memcached:memcached:1.4.16
Memcached » Memcached » Version: 1.4.17

cpe:2.3:a:memcached:memcached:1.4.17
Memcached » Memcached » Version: 1.4.18

cpe:2.3:a:memcached:memcached:1.4.18
Memcached » Memcached » Version: 1.4.19

cpe:2.3:a:memcached:memcached:1.4.19
Memcached » Memcached » Version: 1.4.2

cpe:2.3:a:memcached:memcached:1.4.2
Memcached » Memcached » Version: 1.4.20

cpe:2.3:a:memcached:memcached:1.4.20
Memcached » Memcached » Version: 1.4.21

cpe:2.3:a:memcached:memcached:1.4.21
Memcached » Memcached » Version: 1.4.22

cpe:2.3:a:memcached:memcached:1.4.22
Memcached » Memcached » Version: 1.4.23

cpe:2.3:a:memcached:memcached:1.4.23
Memcached » Memcached » Version: 1.4.24

cpe:2.3:a:memcached:memcached:1.4.24
Memcached » Memcached » Version: 1.4.25

cpe:2.3:a:memcached:memcached:1.4.25
Memcached » Memcached » Version: 1.4.26

cpe:2.3:a:memcached:memcached:1.4.26
Memcached » Memcached » Version: 1.4.27

cpe:2.3:a:memcached:memcached:1.4.27
Memcached » Memcached » Version: 1.4.28

cpe:2.3:a:memcached:memcached:1.4.28
Memcached » Memcached » Version: 1.4.29

cpe:2.3:a:memcached:memcached:1.4.29
Memcached » Memcached » Version: 1.4.3

cpe:2.3:a:memcached:memcached:1.4.3
Memcached » Memcached » Version: 1.4.30

cpe:2.3:a:memcached:memcached:1.4.30
Memcached » Memcached » Version: 1.4.31

cpe:2.3:a:memcached:memcached:1.4.31
Memcached » Memcached » Version: 1.4.32

cpe:2.3:a:memcached:memcached:1.4.32
Memcached » Memcached » Version: 1.4.33

cpe:2.3:a:memcached:memcached:1.4.33
Memcached » Memcached » Version: 1.4.34

cpe:2.3:a:memcached:memcached:1.4.34
Memcached » Memcached » Version: 1.4.35

cpe:2.3:a:memcached:memcached:1.4.35
Memcached » Memcached » Version: 1.4.36

cpe:2.3:a:memcached:memcached:1.4.36
Memcached » Memcached » Version: 1.4.37

cpe:2.3:a:memcached:memcached:1.4.37
Memcached » Memcached » Version: 1.4.38

cpe:2.3:a:memcached:memcached:1.4.38
Memcached » Memcached » Version: 1.4.4

cpe:2.3:a:memcached:memcached:1.4.4
Memcached » Memcached » Version: 1.4.5

cpe:2.3:a:memcached:memcached:1.4.5
Memcached » Memcached » Version: 1.4.6

cpe:2.3:a:memcached:memcached:1.4.6
Memcached » Memcached » Version: 1.4.7

cpe:2.3:a:memcached:memcached:1.4.7
Memcached » Memcached » Version: 1.4.8

cpe:2.3:a:memcached:memcached:1.4.8
Memcached » Memcached » Version: 1.4.9

cpe:2.3:a:memcached:memcached:1.4.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-9951

Products

Pricing

Contact Us