Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Aerospike records in CISA KEVNo Aerospike vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 53
An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Server 3.10.0.3.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.077 · Published 2017-01-26 · No fix listed CWE-787
Priority MEDIUM 53
An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Server 3.10.0.3.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.077 · Published 2017-01-26 · No fix listed CWE-787
Priority MEDIUM 52
An exploitable out-of-bounds indexing vulnerability exists within the RW fabric message particle type of Aerospike Database Server 3.10.0.3.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.07249 · Published 2017-02-21 · No fix listed CWE-129
Priority MEDIUM 52
An exploitable out-of-bounds write vulnerability exists in the batch transaction field parsing functionality of Aerospike Database Server 3.10.0.3.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06862 · Published 2017-02-21 · No fix listed CWE-787
Priority MEDIUM 41
An exploitable out-of-bounds read vulnerability exists in the client message-parsing functionality of Aerospike Database Server 3.10.0.3.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.02889 · Published 2017-01-26 · No fix listed CWE-125
Priority LOW 38
An exploitable denial-of-service vulnerability exists in the fabric-worker component of Aerospike Database Server 3.10.0.3.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0292 · Published 2017-02-21 · No fix listed CWE-476
THREATIST.IORead the docs