CVE-2016-9050
An exploitable out-of-bounds read vulnerability exists in the client message-parsing functionality of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause an out-of-bounds read resulting in disclosure of memory within the process, the same vulnerability can also be used to trigger a denial of service. An attacker can simply connect to the port and send the packet to trigger this vulnerability.
- Score
- CVSS 3.1 8.2 High
- Status
- Modified - talos-cna@cisco.com
- Published
- 2017-01-26
- Last modified
- 2024-08-06
- Weaknesses
- CWE-125
Affected products
References
- http://www.securityfocus.com/bid/95415
- http://www.talosintelligence.com/reports/TALOS-2016-0264/
