CVE-2016-9052
CriticalSummary
An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause a stack-based buffer overflow, resulting in remote code execution.
Risk Assessment
An attacker can remotely exploit this vulnerability by connecting to the appropriate port, posing a significant security risk to the system.
Recommendation
It is recommended to upgrade to the latest version of Aerospike Database Server to mitigate this vulnerability and to monitor network traffic for potential attack attempts.
Original NVD description (English source)
An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause a stack-based buffer overflow in the function as_sindex__simatch_by_iname resulting in remote code execution. An attacker can simply connect to the port to trigger this vulnerability.