cvedb.io
CVE-2016-9053
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2017-02-21T22:59:00.230 · Last modified 2026-06-17T00:55:22.900

Summary

An exploitable out-of-bounds indexing vulnerability exists within the RW fabric message particle type of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause the server to fetch a function table outside the bounds of an array resulting in remote code execution. An attacker can simply connect to the port to trigger this vulnerability.

Affected products

aerospike — database_server

Does this affect you?

Add your gear to cvedb and we'll alert you only when aerospike ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.