CVE-2016-8339 | BDVDB-2026-79072 Detail

Description#

A buffer overflow in Redis 3.2.x prior to 3.2.4 causes arbitrary code execution when a crafted command is sent. An out of bounds write vulnerability exists in the handling of the client-output-buffer-limit option during the CONFIG SET command for the Redis data structure store. A crafted CONFIG SET command can lead to an out of bounds write potentially resulting in code execution.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12016-10-28Record published in the CVE List.
2. Version 22024-08-06Most recent update recorded in the CVE List.