MEDIUM
Tarantool datetime.c tm_to_datetime assertion
Published Jun 24, 2025
4.8
MEDIUMCVSS 4.0
EPSS 0.18%
Description
A vulnerability has been found in Tarantool up to 3.3.1 and classified as problematic. Affected by this vulnerability is the function tm_to_datetime in the library src/lib/core/datetime.c. The manipulation leads to reachable assertion. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.
Affected products
- Vendor n/a Product Tarantool Defaultunknown
Affected
- 3.3.0
- 3.3.1
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| n/a | Tarantool | unknown | Affected
|
No data.
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (6)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-18975 Advisory
- https://github.com/tarantool/tarantool/issues/11347 issue-tracking
- https://github.com/user-attachments/files/19613858/tarantool_crash.txt exploit
- https://vuldb.com/?ctiid.313663 signaturepermissions-required
- https://vuldb.com/?id.313663 vdb-entrytechnical-description
- https://vuldb.com/?submit.597454 third-party-advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-18975 | Advisory | |
| https://github.com/tarantool/tarantool/issues/11347 | issue-tracking | |
| https://github.com/user-attachments/files/19613858/tarantool_crash.txt | exploit | |
| https://vuldb.com/?ctiid.313663 | signaturepermissions-required | |
| https://vuldb.com/?id.313663 | vdb-entrytechnical-description | |
| https://vuldb.com/?submit.597454 | third-party-advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner VulDB
Published Jun 24, 2025
Updated Jun 24, 2025
Reserved Jun 23, 2025
Link CVE-2025-6536
CISA Vulnrichment
Updated Jun 24, 2025
Red Hat
No data
GitHub
No data