Lucene search

K
ubuntucveUbuntu.comUB:CVE-2016-9037
HistoryDec 23, 2016 - 12:00 a.m.

CVE-2016-9037

2016-12-2300:00:00
ubuntu.com
ubuntu.com
9

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.03 Low

EPSS

Percentile

91.0%

An exploitable out-of-bounds array access vulnerability exists in the
xrow_header_decode function of Tarantool 1.7.2.0-g8e92715. A specially
crafted packet can cause the function to access an element outside the
bounds of a global array that is used to determine the type of the
specified key’s value. This can lead to an out of bounds read within the
context of the server. An attacker who exploits this vulnerability can
cause a denial of service vulnerability on the server.

OSVersionArchitecturePackageVersionFilename
ubuntu16.04noarchtarantool< anyUNKNOWN

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.03 Low

EPSS

Percentile

91.0%