cbcvebase.
CVE-2016-9054
published 2017-01-26

CVE-2016-9054: An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Server 3.10.0.3. A specially crafted packet…

PriorityP264critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
7.70%
93.9th percentile
An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause a stack-based buffer overflow in the function as_sindex__simatch_list_by_set_binid resulting in remote code execution. An attacker can simply connect to the port to trigger this vulnerability.

Affected

1 ranges
VendorProductVersion rangeFixed in
aerospikedatabase_server

Detection & IOCsextracted from sources · hover to see the quote

snort
41206
snort
41212
snort
41216
  • The vulnerability is triggered by a specially crafted packet sent to the Aerospike Database Server's listening port; monitor for unexpected or malformed query packets targeting the Aerospike service port.
  • ·Snort rules 41206, 41212, 41216 cover multiple CVEs in the same advisory (CVE-2016-9050, CVE-2016-9052, CVE-2016-9054); rule-to-CVE mapping is not individually specified and rules may be updated.
  • ·Vulnerability was confirmed only against Aerospike Database Server version 3.10.0.3; exploitation behavior on other versions is not documented in the sources.

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.