CVE-2016-9037— Tarantool 安全漏洞

N/A

An exploitable out-of-bounds array access vulnerability exists in the xrow_header_decode function of Tarantool 1.7.2.0-g8e92715. A specially crafted packet can cause the function to access an element outside the bounds of a global array that is used to determine the type of the specified key's value. This can lead to an out of bounds read within the context of the server. An attacker who exploits this vulnerability can cause a denial of service vulnerability on the server.

N/A

跨界内存读

Tarantool 安全漏洞

Tarantool是一套使用Lua语言编写的集成了Node.js的网络编程和Redis数据持久性的嵌入式NoSQL数据库管理系统。 Tarantool 1.7.2.0-g8e92715版本中的‘the xrow_header_decode’函数存在越边界数组访问漏洞。攻击者可借助特制的数据包利用该漏洞在服务器的上下文中越边界读取数据，造成拒绝服务。

N/A

N/A