CVE-2016-9051 in Database Server
Summary
An exploitable out-of-bounds write vulnerability exists in the batch transaction field parsing functionality of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause an out-of-bounds write resulting in memory corruption which can lead to remote code execution. An attacker can simply connect to the port to trigger this vulnerability.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
10/26/2016
Disclosure
02/21/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 97180 | Aerospike Database Server Batch Transaction Field out-of-bounds write | 787 | Not defined | Workaround | CVE-2016-9051 |