CVE-2025-6536
CVE-2025-6536 · Tarantool datetime.c tm_to_datetime assertion
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A vulnerability has been found in Tarantool up to 3.3.1 and classified as problematic. Affected by this vulnerability is the function tm_to_datetime in the library src/lib/core/datetime.c. The manipulation leads to reachable assertion. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.
CVSS 4.8 · Medium · EPSS 0.2%
- Published
- Updated
Stack: system
Affected products and versions
tarantool
- Versions
- 3.3.0: Affected
- 3.3.1: Affected
No fix published
tarantool Debian:12
- Versions
- 2.6.0-1.2
- 2.6.0-1.3
- 2.6.0-1.4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
tarantool Debian:13
- Versions
- 2.6.0-1.4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
tarantool Ubuntu:16.04:LTS
- Versions
- 1.6.3.539.g211672f-1
- 1.6.7.588.g76bbd9c-1
- 1.6.7.588.g76bbd9c-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
tarantool Ubuntu:20.04:LTS
- Versions
- 1.9.1.26.g63eb81e3c-1.1build1
- 1.9.1.26.g63eb81e3c-1.1build2
- 1.9.1.26.g63eb81e3c-1.1build3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
tarantool Ubuntu:22.04:LTS
- Versions
- 2.6.0-1
- 2.6.0-1ubuntu1
- 2.6.0-1ubuntu2
- 2.6.0-1ubuntu3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
tarantool Ubuntu:24.04:LTS
- Versions
- 2.6.0-1.2build1
- 2.6.0-1.3
- 2.6.0-1.3build1
- 2.6.0-1.3build3
- 2.6.0-1.3build4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
tarantool Ubuntu:25.10
- Versions
- 2.6.0-1.4build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published