tarantool:luaL_loadbuffer_fuzzer: Stack-use-after-return in lj_mem_newgco

Project: https://github.com/tarantool/tarantool.git Detailed Report: https://oss-fuzz.com/testcase?key=4869045167915008 Project: tarantool Fuzzing Engine: libFuzzer Fuzz Target: luaLloadbufferfuzzer Job Type: libfuzzerasantarantool Platform Id: linux Crash Type: Stack-use-after-return WRITE 8 Cra...

tarantool:luaL_loadbuffer_fuzzer: Heap-buffer-overflow in lj_state_growstack

Project: https://github.com/tarantool/tarantool.git Detailed Report: https://oss-fuzz.com/testcase?key=4572468272496640 Project: tarantool Fuzzing Engine: libFuzzer Fuzz Target: luaLloadbufferfuzzer Job Type: libfuzzerasantarantool Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

tarantool:luaL_loadbuffer_fuzzer: Crash with empty stacktrace

Project: https://github.com/tarantool/tarantool.git Detailed Report: https://oss-fuzz.com/testcase?key=5795224288821248 Project: tarantool Fuzzing Engine: libFuzzer Fuzz Target: luaLloadbufferfuzzer Job Type: libfuzzerasantarantool Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

tarantool:luaL_loadbuffer_fuzzer: Segv on unknown address in lj_BC_RET1

Project: https://github.com/tarantool/tarantool.git Detailed Report: https://oss-fuzz.com/testcase?key=6242772659011584 Project: tarantool Fuzzing Engine: libFuzzer Fuzz Target: luaLloadbufferfuzzer Job Type: libfuzzerasantarantool Platform Id: linux Crash Type: Segv on unknown address Crash...

tarantool:luaL_loadbuffer_fuzzer: Heap-buffer-overflow in parse_chunk

Project: https://github.com/tarantool/tarantool.git Detailed Report: https://oss-fuzz.com/testcase?key=5154420670988288 Project: tarantool Fuzzing Engine: libFuzzer Fuzz Target: luaLloadbufferfuzzer Job Type: libfuzzerasantarantool Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

tarantool:luaL_loadbuffer_fuzzer: Heap-buffer-overflow in parse_chunk

Project: https://github.com/tarantool/tarantool.git Detailed Report: https://oss-fuzz.com/testcase?key=5951830473179136 Project: tarantool Fuzzing Engine: libFuzzer Fuzz Target: luaLloadbufferfuzzer Job Type: libfuzzerasantarantool Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

tarantool:datetime_parse_full_fuzzer: Crash in tnt_dt_weeks_in_year

Detailed Report: https://oss-fuzz.com/testcase?key=6144703735922688 Project: tarantool Fuzzing Engine: afl Fuzz Target: datetimeparsefullfuzzer Job Type: aflasantarantool Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7ee26ae43ba0 Crash State: tntdtweeksinyear dtfromywdchecked...

tarantool:luaL_loadbuffer_fuzzer: Crash in snap_restoreval

Project: https://github.com/tarantool/tarantool.git Detailed Report: https://oss-fuzz.com/testcase?key=6668810630070272 Project: tarantool Fuzzing Engine: libFuzzer Fuzz Target: luaLloadbufferfuzzer Job Type: libfuzzerasantarantool Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

Denial Of Service (DoS)

tarantool is vulnerable to denial of service. An exploitable out-of-bounds array access vulnerability exists in the xrowheaderdecode function allows an attacker to crash the application via a malicious packet...

Denial Of Service (DoS)

Tarantool is vulnerable to denial of service. A specially crafted packet can cause the mpcheck function to incorrectly return success when trying to check if decoding a map16 packet will read outside the bounds of a buffer, resulting in a denial of service vulnerability...

Mail.ru: Exposed Credentials May Leads to Tarantool Infrastructure Leak

Application configuration data related to Tarantool project was leaked on github.com...

Mail.ru: Открытая админка Tarantool

Testing installation of internal Tarantool admin inteface without actual users data was available from external network...

Mail.ru: Access to Tarantool

An access to admin interface of Tarantool host in development/stage environment was not properly restricted, allowing LUA code execution...

Tarantool Msgpuck mp_check Denial Of Service Vulnerability(CVE-2016-9036)

Summary An exploitable incorrect return value vulnerability exists in the mpcheck function of Tarantool's Msgpuck library 1.0.3. A specially crafted packet can cause the mpcheck function to incorrectly return success when trying to check if decoding a map16 packet will read outside the bounds of ...

Tarantool Key-type Denial Of Service Vulnerability(CVE-2016-9037)

Summary An exploitable out-of-bounds array access vulnerability exists in the xrowheaderdecode function of Tarantool 1.7.2.0-g8e92715. A specially crafted packet can cause the function to access an element outside the bounds of a global array that is used to determine the type of the specified...

Tarantool xrow_header_decode Out of Bounds Read (CVE-2016-9037)

An Out of Bounds read vulnerability has been reported in the xrowheaderdecode function of Tarantool. This vulnerability is due to incorrect handling of objects in memory when trying to determine the type of a key. A remote, unauthenticated attacker could exploit this vulnerability by sending a...

PYSEC-2016-39

An exploitable out-of-bounds array access vulnerability exists in the xrowheaderdecode function of Tarantool 1.7.2.0-g8e92715. A specially crafted packet can cause the function to access an element outside the bounds of a global array that is used to determine the type of the specified key's valu...

UBUNTU-CVE-2016-9036

An exploitable incorrect return value vulnerability exists in the mpcheck function of Tarantool's Msgpuck library 1.0.3. A specially crafted packet can cause the mpcheck function to incorrectly return success when trying to check if decoding a map16 packet will read outside the bounds of a buffer...

PYSEC-2016-39

An exploitable out-of-bounds array access vulnerability exists in the xrowheaderdecode function of Tarantool 1.7.2.0-g8e92715. A specially crafted packet can cause the function to access an element outside the bounds of a global array that is used to determine the type of the specified key's valu...

Out-of-bounds

An exploitable out-of-bounds array access vulnerability exists in the xrowheaderdecode function of Tarantool 1.7.2.0-g8e92715. A specially crafted packet can cause the function to access an element outside the bounds of a global array that is used to determine the type of the specified key's valu...