Vulnetix
Try Vulnetix Request Demo
CVE-2016-8339 REJECTED

A buffer overflow in Redis 3.2.x prior to 3.2.4 causes arbitrary code execution when a crafted command is sent. An out of bounds write vulnerability exists in the handling of the client-output-buffer-limit option during the CONFIG SET command for the Redis data structure store. A crafted CONFIG SET command can lead to an out of bounds write potentially resulting in code execution.

EPSS 2.49% · 85.2th percentile

Risk Scores

EPSS Score
2.49%
85.2th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSredis0, 4:4.0.1-7, 4:4.0.2-6

Timeline

References

Open in Interactive Console →