Oval Definition:	oval:org.opensuse.security:def:20091255
Revision Date: 2022-09-02 Version: 1 Title: CVE-2009-1255 Description: The process_stat function in (1) Memcached before 1.2.8 and (2) MemcacheDB 1.2.0 discloses (a) the contents of /proc/self/maps in response to a stats maps command and (b) memory-allocation statistics in response to a stats malloc command, which allows remote attackers to obtain sensitive information such as the locations of memory regions, and defeat ASLR protection, by sending a command to the daemon's TCP port. Family: unix Class: vulnerability Status: Reference(s): CVE-2009-1255 Mitre CVE-2009-1255 SUSE CVE-2009-1255 SUSE-SR:2009:013 Platform(s): openSUSE 10.3 openSUSE 11.0 openSUSE 11.1 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise SDK 11 GA SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 Product(s): Definition Synopsis Release Information sle11-sdk is installed AND memcached less than 1.2.6-5.16.1 OR Package Information suse110 is installed AND memcached less than 1.2.2-49.2 OR suse111 is installed AND memcached less than 1.2.6-5.7.1 Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP5 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed AND memcached is affected Definition Synopsis Release Information SUSE OpenStack Cloud 8 is installed OR SUSE OpenStack Cloud Crowbar 8 is installed AND memcached is affected Definition Synopsis Release Information SUSE OpenStack Cloud 9 is installed OR SUSE OpenStack Cloud Crowbar 9 is installed AND memcached is affected Definition Synopsis Release Information SUSE Linux Enterprise High Performance Computing 12 SP5 is installed OR SUSE Linux Enterprise Server 12 SP5 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed AND memcached is affected Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed AND memcached is affected
BACK