Zimbra Collaboration (aka ZCS) 8.8.15 and 9.0 allows an unauthenticated attacker to inject arbitrary memcache commands into a targeted instance. These memcache commands becomes unescaped, causing an overwrite of arbitrary cached entries.
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Zimbra_collaboration_suite | Synacor | 8.8.15 (including) | 8.8.15 (including) |
| Zimbra_collaboration_suite | Synacor | 8.8.15-p1 (including) | 8.8.15-p1 (including) |
| Zimbra_collaboration_suite | Synacor | 8.8.15-p10 (including) | 8.8.15-p10 (including) |
| Zimbra_collaboration_suite | Synacor | 8.8.15-p11 (including) | 8.8.15-p11 (including) |
| Zimbra_collaboration_suite | Synacor | 8.8.15-p12 (including) | 8.8.15-p12 (including) |
| Zimbra_collaboration_suite | Synacor | 8.8.15-p13 (including) | 8.8.15-p13 (including) |
| Zimbra_collaboration_suite | Synacor | 8.8.15-p14 (including) | 8.8.15-p14 (including) |
| Zimbra_collaboration_suite | Synacor | 8.8.15-p15 (including) | 8.8.15-p15 (including) |
| Zimbra_collaboration_suite | Synacor | 8.8.15-p16 (including) | 8.8.15-p16 (including) |
| Zimbra_collaboration_suite | Synacor | 8.8.15-p17 (including) | 8.8.15-p17 (including) |
| Zimbra_collaboration_suite | Synacor | 8.8.15-p18 (including) | 8.8.15-p18 (including) |
| Zimbra_collaboration_suite | Synacor | 8.8.15-p19 (including) | 8.8.15-p19 (including) |
| Zimbra_collaboration_suite | Synacor | 8.8.15-p2 (including) | 8.8.15-p2 (including) |
| Zimbra_collaboration_suite | Synacor | 8.8.15-p20 (including) | 8.8.15-p20 (including) |
| Zimbra_collaboration_suite | Synacor | 8.8.15-p21 (including) | 8.8.15-p21 (including) |
| Zimbra_collaboration_suite | Synacor | 8.8.15-p22 (including) | 8.8.15-p22 (including) |
| Zimbra_collaboration_suite | Synacor | 8.8.15-p23 (including) | 8.8.15-p23 (including) |
| Zimbra_collaboration_suite | Synacor | 8.8.15-p24 (including) | 8.8.15-p24 (including) |
| Zimbra_collaboration_suite | Synacor | 8.8.15-p25 (including) | 8.8.15-p25 (including) |
| Zimbra_collaboration_suite | Synacor | 8.8.15-p26 (including) | 8.8.15-p26 (including) |
| Zimbra_collaboration_suite | Synacor | 8.8.15-p27 (including) | 8.8.15-p27 (including) |
| Zimbra_collaboration_suite | Synacor | 8.8.15-p28 (including) | 8.8.15-p28 (including) |
| Zimbra_collaboration_suite | Synacor | 8.8.15-p29 (including) | 8.8.15-p29 (including) |
| Zimbra_collaboration_suite | Synacor | 8.8.15-p3 (including) | 8.8.15-p3 (including) |
| Zimbra_collaboration_suite | Synacor | 8.8.15-p30 (including) | 8.8.15-p30 (including) |
| Zimbra_collaboration_suite | Synacor | 8.8.15-p31 (including) | 8.8.15-p31 (including) |
| Zimbra_collaboration_suite | Synacor | 8.8.15-p4 (including) | 8.8.15-p4 (including) |
| Zimbra_collaboration_suite | Synacor | 8.8.15-p5 (including) | 8.8.15-p5 (including) |
| Zimbra_collaboration_suite | Synacor | 8.8.15-p6 (including) | 8.8.15-p6 (including) |
| Zimbra_collaboration_suite | Synacor | 8.8.15-p7 (including) | 8.8.15-p7 (including) |
| Zimbra_collaboration_suite | Synacor | 8.8.15-p8 (including) | 8.8.15-p8 (including) |
| Zimbra_collaboration_suite | Synacor | 8.8.15-p9 (including) | 8.8.15-p9 (including) |
| Zimbra_collaboration_suite | Synacor | 9.0.0 (including) | 9.0.0 (including) |
| Zimbra_collaboration_suite | Synacor | 9.0.0-p1 (including) | 9.0.0-p1 (including) |
| Zimbra_collaboration_suite | Synacor | 9.0.0-p10 (including) | 9.0.0-p10 (including) |
| Zimbra_collaboration_suite | Synacor | 9.0.0-p11 (including) | 9.0.0-p11 (including) |
| Zimbra_collaboration_suite | Synacor | 9.0.0-p12 (including) | 9.0.0-p12 (including) |
| Zimbra_collaboration_suite | Synacor | 9.0.0-p13 (including) | 9.0.0-p13 (including) |
| Zimbra_collaboration_suite | Synacor | 9.0.0-p14 (including) | 9.0.0-p14 (including) |
| Zimbra_collaboration_suite | Synacor | 9.0.0-p15 (including) | 9.0.0-p15 (including) |
| Zimbra_collaboration_suite | Synacor | 9.0.0-p16 (including) | 9.0.0-p16 (including) |
| Zimbra_collaboration_suite | Synacor | 9.0.0-p17 (including) | 9.0.0-p17 (including) |
| Zimbra_collaboration_suite | Synacor | 9.0.0-p18 (including) | 9.0.0-p18 (including) |
| Zimbra_collaboration_suite | Synacor | 9.0.0-p19 (including) | 9.0.0-p19 (including) |
| Zimbra_collaboration_suite | Synacor | 9.0.0-p2 (including) | 9.0.0-p2 (including) |
| Zimbra_collaboration_suite | Synacor | 9.0.0-p20 (including) | 9.0.0-p20 (including) |
| Zimbra_collaboration_suite | Synacor | 9.0.0-p21 (including) | 9.0.0-p21 (including) |
| Zimbra_collaboration_suite | Synacor | 9.0.0-p22 (including) | 9.0.0-p22 (including) |
| Zimbra_collaboration_suite | Synacor | 9.0.0-p23 (including) | 9.0.0-p23 (including) |
| Zimbra_collaboration_suite | Synacor | 9.0.0-p3 (including) | 9.0.0-p3 (including) |
| Zimbra_collaboration_suite | Synacor | 9.0.0-p4 (including) | 9.0.0-p4 (including) |
| Zimbra_collaboration_suite | Synacor | 9.0.0-p5 (including) | 9.0.0-p5 (including) |
| Zimbra_collaboration_suite | Synacor | 9.0.0-p6 (including) | 9.0.0-p6 (including) |
| Zimbra_collaboration_suite | Synacor | 9.0.0-p7 (including) | 9.0.0-p7 (including) |
| Zimbra_collaboration_suite | Synacor | 9.0.0-p8 (including) | 9.0.0-p8 (including) |
| Zimbra_collaboration_suite | Synacor | 9.0.0-p9 (including) | 9.0.0-p9 (including) |