7.5
CVE-2016-9049
- EPSS 2.92%
- Veröffentlicht 21.02.2017 22:59:00
- Zuletzt bearbeitet 13.05.2026 00:24:29
- Erkennungen
LoginAn exploitable denial-of-service vulnerability exists in the fabric-worker component of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause the server process to dereference a null pointer. An attacker can simply connect to a TCP port in order to trigger this vulnerability.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Aerospike ≫ Database Server Version 3.10.0.3
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.92% | 0.852 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
| NIST | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:P
|
| Cisco Talos | 7.5 | 3.9 | 3.6 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
CWE-476 NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.
http://www.securityfocus.com/bid/96376
http://www.talosintelligence.com/reports/TALOS-2016-0263/