CVE-2016-9051
CriticalSummary
An out-of-bounds write vulnerability exists in the batch transaction field parsing functionality of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause an out-of-bounds write resulting in memory corruption and potentially lead to remote code execution.
Risk Assessment
This vulnerability poses a serious risk to organizations as an attacker can remotely exploit the flaw, potentially leading to system takeover.
Recommendation
It is recommended to upgrade to the latest version of Aerospike Database Server to mitigate this vulnerability and to monitor network traffic for potential attack attempts.
Original NVD description (English source)
An exploitable out-of-bounds write vulnerability exists in the batch transaction field parsing functionality of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause an out-of-bounds write resulting in memory corruption which can lead to remote code execution. An attacker can simply connect to the port to trigger this vulnerability.