52 matches found
Mail.ru: Exposed Credentials May Leads to Tarantool Infrastructure Leak
Application configuration data related to Tarantool project was leaked on github.com...
Mail.ru: Открытая админка Tarantool
Testing installation of internal Tarantool admin inteface without actual users data was available from external network...
Mail.ru: Access to Tarantool
An access to admin interface of Tarantool host in development/stage environment was not properly restricted, allowing LUA code execution...
Tarantool Key-type Denial Of Service Vulnerability(CVE-2016-9037)
Summary An exploitable out-of-bounds array access vulnerability exists in the xrowheaderdecode function of Tarantool 1.7.2.0-g8e92715. A specially crafted packet can cause the function to access an element outside the bounds of a global array that is used to determine the type of the specified...
Tarantool Msgpuck mp_check Denial Of Service Vulnerability(CVE-2016-9036)
Summary An exploitable incorrect return value vulnerability exists in the mpcheck function of Tarantool's Msgpuck library 1.0.3. A specially crafted packet can cause the mpcheck function to incorrectly return success when trying to check if decoding a map16 packet will read outside the bounds of ...
Tarantool xrow_header_decode Out of Bounds Read (CVE-2016-9037)
An Out of Bounds read vulnerability has been reported in the xrowheaderdecode function of Tarantool. This vulnerability is due to incorrect handling of objects in memory when trying to determine the type of a key. A remote, unauthenticated attacker could exploit this vulnerability by sending a...
CVE-2016-9037
An exploitable out-of-bounds array access vulnerability exists in the xrowheaderdecode function of Tarantool 1.7.2.0-g8e92715. A specially crafted packet can cause the function to access an element outside the bounds of a global array that is used to determine the type of the specified key's valu...
PYSEC-2016-39
An exploitable out-of-bounds array access vulnerability exists in the xrowheaderdecode function of Tarantool 1.7.2.0-g8e92715. A specially crafted packet can cause the function to access an element outside the bounds of a global array that is used to determine the type of the specified key's valu...
Out-of-bounds
An exploitable out-of-bounds array access vulnerability exists in the xrowheaderdecode function of Tarantool 1.7.2.0-g8e92715. A specially crafted packet can cause the function to access an element outside the bounds of a global array that is used to determine the type of the specified key's valu...
UBUNTU-CVE-2016-9036
An exploitable incorrect return value vulnerability exists in the mpcheck function of Tarantool's Msgpuck library 1.0.3. A specially crafted packet can cause the mpcheck function to incorrectly return success when trying to check if decoding a map16 packet will read outside the bounds of a buffer...
PYSEC-2016-39
An exploitable out-of-bounds array access vulnerability exists in the xrowheaderdecode function of Tarantool 1.7.2.0-g8e92715. A specially crafted packet can cause the function to access an element outside the bounds of a global array that is used to determine the type of the specified key's valu...
DEBIAN-CVE-2016-9037
An exploitable out-of-bounds array access vulnerability exists in the xrowheaderdecode function of Tarantool 1.7.2.0-g8e92715. A specially crafted packet can cause the function to access an element outside the bounds of a global array that is used to determine the type of the specified key's valu...
DEBIAN-CVE-2016-9036
An exploitable incorrect return value vulnerability exists in the mpcheck function of Tarantool's Msgpuck library 1.0.3. A specially crafted packet can cause the mpcheck function to incorrectly return success when trying to check if decoding a map16 packet will read outside the bounds of a buffer...
CVE-2016-9037
An exploitable out-of-bounds array access vulnerability exists in the xrowheaderdecode function of Tarantool 1.7.2.0-g8e92715. A specially crafted packet can cause the function to access an element outside the bounds of a global array that is used to determine the type of the specified key's valu...
UBUNTU-CVE-2016-9037
An exploitable out-of-bounds array access vulnerability exists in the xrowheaderdecode function of Tarantool 1.7.2.0-g8e92715. A specially crafted packet can cause the function to access an element outside the bounds of a global array that is used to determine the type of the specified key's valu...
CVE-2016-9037
The supplied documents confirm CVE-2016-9037 affects Tarantool 1.7.2.0-g8e92715, via an exploitable out-of-bounds read in the xrow_header_decode function. A crafted packet can access outside the bounds of a global array used to determine a key’s value type, leading to a denial of service on the s...
CVE-2016-9036
CVE-2016-9036 affects Tarantool’s Msgpuck library 1.0.3. The vulnerability lies in the mp_check function, where decoding a map16 packet can incorrectly report success, allowing an out-of-bounds read and resulting in a denial of service. Public documents confirm the issue but do not provide patch ...
CVE-2016-9036
An exploitable incorrect return value vulnerability exists in the mpcheck function of Tarantool's Msgpuck library 1.0.3. A specially crafted packet can cause the mpcheck function to incorrectly return success when trying to check if decoding a map16 packet will read outside the bounds of a buffer...
CVE-2016-9036
An exploitable incorrect return value vulnerability exists in the mpcheck function of Tarantool's Msgpuck library 1.0.3. A specially crafted packet can cause the mpcheck function to incorrectly return success when trying to check if decoding a map16 packet will read outside the bounds of a buffer...
CVE-2016-9037
An exploitable out-of-bounds array access vulnerability exists in the xrowheaderdecode function of Tarantool 1.7.2.0-g8e92715. A specially crafted packet can cause the function to access an element outside the bounds of a global array that is used to determine the type of the specified key's valu...