Security Alert # 2: VelocyPack Buffer Overflow

The VelocyPack implementation used in ArangoDB can trigger a buffer overflow. In order to exploit this, an attacker needs access to the database port. As a buffer overflow results in undefined behavior the attacker might crash the database server or gain illegal access to data stored in the database.

It is therefore important to upgrade ArangoDB as soon as possible.