CVE-2009-2415

Published: 10 August 2009

Multiple integer overflows in memcached 1.1.12 and 1.2.2 allow remote attackers to execute arbitrary code via vectors involving length attributes that trigger heap-based buffer overflows.

Priority

Status

Package	Release	Status
memcached Launchpad, Ubuntu, Debian	dapper	Released (1.1.12-1+etch1build0.6.06.1)
	hardy	Released (1.2.2-1+lenny1build0.8.04.1)
	intrepid	Released (1.2.2-1+lenny1build0.8.10.1)
	jaunty	Released (1.2.2-1+lenny1build0.9.04.1)
	upstream	Released (1.2.8-1)

References

https://www.cve.org/CVERecord?id=CVE-2009-2415
NVD
Launchpad
Debian

Bugs

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=540379
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=540381

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›