Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Tarantool Subscribe
Filtered by product Msgpuck
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-9036 1 Tarantool 1 Msgpuck 2022-12-13 5.0 MEDIUM 7.5 HIGH
An exploitable incorrect return value vulnerability exists in the mp_check function of Tarantool's Msgpuck library 1.0.3. A specially crafted packet can cause the mp_check function to incorrectly return success when trying to check if decoding a map16 packet will read outside the bounds of a buffer, resulting in a denial of service vulnerability.