[SECURITY] Fedora 24 Update: tarantool-1.6.9.52-1.fc24

Tarantool is a high performance in-memory NoSQL database and Lua application server. Tarantool supports replication, online backup and stored procedures in Lua. This package provides the server daemon and admin tools...

Fedora 25 : msgpuck / tarantool (2016-2d0c8ba781)

Security fix for CVE-2016-9036, CVE-2016-9037 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Fedora 24 : msgpuck / tarantool (2016-badd014afe)

Security fix for CVE-2016-9036, CVE-2016-9037 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Tarantool Key-type Denial Of Service Vulnerability

Summary An exploitable out-of-bounds array access vulnerability exists in the xrowheaderdecode function of Tarantool 1.7.2.0-g8e92715. A specially crafted packet can cause the function to access an element outside the bounds of a global array that is used to determine the type of the specified...

Tarantool Msgpuck mp_check Denial Of Service Vulnerability

Summary An exploitable incorrect return value vulnerability exists in the mpcheck function of Tarantool’s Msgpuck library 1.0.3. A specially crafted packet can cause the mpcheck function to incorrectly return success when trying to check if decoding a map16 packet will read outside the bounds of ...

PT-2016-7630 · Tarantool · Tarantool

Name of the Vulnerable Software and Affected Versions: Tarantool version 1.7.2.0-g8e92715 Description: The issue is related to an out-of-bounds array access in the xrow header decode function. A specially crafted packet can cause the function to access an element outside the bounds of a global...

PT-2016-7629 · Tarantool · Msgpuck +1

Name of the Vulnerable Software and Affected Versions: Tarantool's Msgpuck library version 1.0.3 Description: The issue is related to an incorrect return value in the mp check function, which can lead to a denial of service when a specially crafted packet is processed. This occurs because the...