Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:28294
HistoryDec 06, 2020 - 3:56 a.m.

Denial Of Service (DoS)

2020-12-0603:56:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
tarantool
denial of service
vulnerability
map16 packet
decoding

EPSS

0.015

Percentile

87.2%

Tarantool is vulnerable to denial of service. A specially crafted packet can cause the mp_check function to incorrectly return success when trying to check if decoding a map16 packet will read outside the bounds of a buffer, resulting in a denial of service vulnerability.