Tarantool

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2016-9037 Dec 23, 22:59 HIGH POC This Week

An exploitable out-of-bounds array access vulnerability exists in the xrow_header_decode function of Tarantool 1.7.2.0-g8e92715. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Denial Of Service Information Disclosure Tarantool

NVD

CVSS 3.1

7.5

EPSS

2.8%

CVE-2016-9036 Dec 23, 22:59 HIGH POC This Week

An exploitable incorrect return value vulnerability exists in the mp_check function of Tarantool's Msgpuck library 1.0.3. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Denial Of Service Information Disclosure Msgpuck Tarantool

NVD

CVSS 3.1

7.5

EPSS

1.3%

CVE-2016-9037

EPSS 3% CVSS 7.5

HIGH POC This Week

Buffer Overflow Denial Of Service Information Disclosure +1

NVD

CVE-2016-9036

EPSS 1% CVSS 7.5

HIGH POC This Week

Buffer Overflow Denial Of Service Information Disclosure +2

NVD