cbcvebase.
CVE-2016-9052
published 2017-01-26

CVE-2016-9052: An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Server 3.10.0.3. A specially crafted packet…

PriorityP264critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
7.70%
93.9th percentile
An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause a stack-based buffer overflow in the function as_sindex__simatch_by_iname resulting in remote code execution. An attacker can simply connect to the port to trigger this vulnerability.

Affected

1 ranges
VendorProductVersion rangeFixed in
aerospikedatabase_server

Detection & IOCsextracted from sources · hover to see the quote

snort
41206
snort
41212
snort
41216
  • Exploitation requires only a network connection to the Aerospike listening port — no authentication needed. Alert on any unexpected external connections to the Aerospike service port.
  • ·Vulnerability is confirmed only in Aerospike Database Server version 3.10.0.3; version 3.11 patches all three related CVEs (CVE-2016-9050, CVE-2016-9052, CVE-2016-9054).
  • ·Snort rules 41206, 41212, 41216 may be updated; always pull the latest rule versions from FireSIGHT Management Center or Snort.org.

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.