Database Server

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:aerospike:database_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAerospike (cf20b851-a58e-5a76-84c8-0a4671231ea0)
ProductDatabase Server (b7508d41-2ab6-500c-86bc-a43563b7bb5a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-9054 vulnerable 2026-06-08 05:08:22.473259 Details available
CRITICAL (9.8)
An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause a stack-based buffer overflow in the function as_sindex__simatch_list_by_set_binid resulting in remote code execution. An attacker can simply connect to the port to trigger this vulnerability.
Published: 2017-01-26T21:00:00.000Z
Updated: 2024-08-06T02:42:09.764Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9053 vulnerable 2026-06-08 05:08:22.472658 Details available
CRITICAL (9.8)
An exploitable out-of-bounds indexing vulnerability exists within the RW fabric message particle type of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause the server to fetch a function table outside the bounds of an array resulting in remote code execution. An attacker can simply connect to the port to trigger this vulnerability.
Published: 2017-02-21T22:00:00.000Z
Updated: 2024-08-06T02:42:10.013Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9051 vulnerable 2026-06-08 05:08:22.470560 Details available
CRITICAL (9.8)
An exploitable out-of-bounds write vulnerability exists in the batch transaction field parsing functionality of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause an out-of-bounds write resulting in memory corruption which can lead to remote code execution. An attacker can simply connect to the port to trigger this vulnerability.
Published: 2017-02-21T22:00:00.000Z
Updated: 2024-08-06T02:42:09.936Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9050 vulnerable 2026-06-08 05:08:22.470062 Details available
HIGH (8.2)
An exploitable out-of-bounds read vulnerability exists in the client message-parsing functionality of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause an out-of-bounds read resulting in disclosure of memory within the process, the same vulnerability can also be used to trigger a denial of service. An attacker can simply connect to the port and send the packet to trigger this vulnerability.
Published: 2017-01-26T21:00:00.000Z
Updated: 2024-08-06T02:42:09.930Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9049 vulnerable 2026-06-08 05:08:22.469061 Details available
HIGH (7.5)
An exploitable denial-of-service vulnerability exists in the fabric-worker component of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause the server process to dereference a null pointer. An attacker can simply connect to a TCP port in order to trigger this vulnerability.
Published: 2017-02-21T22:00:00.000Z
Updated: 2024-08-06T02:42:09.798Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.