CVE-2016-9049

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

An exploitable denial-of-service vulnerability exists in the fabric-worker component of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause the server process to dereference a null pointer. An attacker can simply connect to a TCP port in order to trigger this vulnerability.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

Vendor	Product	Versions
Aerospike	Database Server	3.10.0.3

References

http://www.securityfocus.com/bid/96376Broken Link, Third Party Advisory, VDB Entry
http://www.talosintelligence.com/reports/TALOS-2016-0263/Exploit, Patch, Technical Description, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/96376Broken Link, Third Party Advisory, VDB Entry
http://www.talosintelligence.com/reports/TALOS-2016-0263/Exploit, Patch, Technical Description, Third Party Advisory, VDB Entry

Timeline

Published: Feb 21, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-90508.2An exploitable out-of-bounds read vulnerability exists in the client message-parsing functionality of Aerospike Database Server 3.10.0.3. A CVE-2016-90519.8An exploitable out-of-bounds write vulnerability exists in the batch transaction field parsing functionality of Aerospike Database Server 3.CVE-2016-90529.8An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Server 3.10.0.3. A speci CVE-2016-90539.8An exploitable out-of-bounds indexing vulnerability exists within the RW fabric message particle type of Aerospike Database Server 3.10.0.3.CVE-2016-90549.8An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Server 3.10.0.3. A speci CVE-2016-90617.5A previously installed malicious Android application which defines a specific signature-level permissions used by Firefox can access API key CVE-2016-90623.3Private browsing mode leaves metadata information, such as URLs, for sites visited in "browser.db" and "browser.db-wal" files within the Fir CVE-2016-90639.8An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox < 50.CVE-2016-90645.9Add-on updates failed to verify that the add-on ID inside the signed package matched the ID of the add-on being updated. An attacker who cou CVE-2016-90657.5The location bar in Firefox for Android can be spoofed by forcing a user into fullscreen mode, blocking its exiting, and creating of a fake CVE-2016-90667.5A buffer overflow resulting in a potentially exploitable crash due to memory allocation issues when handling large amounts of incoming data.CVE-2016-90676.5Two use-after-free errors during DOM operations resulting in potentially exploitable crashes. This vulnerability affects Firefox < 50.