CVE-2016-9050 in Database Serverinfo

Summary

An exploitable out-of-bounds read vulnerability exists in the client message-parsing functionality of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause an out-of-bounds read resulting in disclosure of memory within the process, the same vulnerability can also be used to trigger a denial of service. An attacker can simply connect to the port and send the packet to trigger this vulnerability.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Responsible

Talos

Reservation

10/26/2016

Disclosure

01/26/2017

CPE

ready

CVSS

7.9

EPSS

0.00607

Activities

Very Low

Sources

Interested in the pricing of exploits?

See the underground prices here!