SERVER-OTHER Tarantool xrowheaderdecode out of bounds read attempt
An exploitable out-of-bounds array access vulnerability exists in the xrowheaderdecode function of Tarantool 18.104.22.168-g8e92715. A specially crafted packet can cause the function to access an element outside the bounds of a global array that is used to determine the type of the specified key's value. This can lead to an out of bounds read within the context of the server. An attacker who exploits this vulnerability can cause a denial of service vulnerability on the server.
CVSS base score 7.5
CVSS impact score 3.6
CVSS exploitability score 3.9
- tarantool tarantool 1.7.2
Ease of attack
Upgrade to the latest non-affected version of the software.
Apply the appropriate vendor supplied patches.
- Talos research team.
- This document was generated from data supplied by the national vulnerability database, a product of the national institute of standards and technology.
- For more information see nvd.