CVE-2016-8339
CriticalSummary
A buffer overflow in Redis versions 3.2.x prior to 3.2.4 can lead to arbitrary code execution when a crafted command is sent. An out of bounds write vulnerability exists in the handling of the client-output-buffer-limit option during the CONFIG SET command.
Risk Assessment
Exploitation of this vulnerability could lead to unauthorized code execution, posing a serious threat to the security of the system and the data stored in Redis.
Recommendation
It is recommended to upgrade Redis to version 3.2.4 or later to mitigate this vulnerability and to monitor the system for suspicious activities.
Original NVD description (English source)
A buffer overflow in Redis 3.2.x prior to 3.2.4 causes arbitrary code execution when a crafted command is sent. An out of bounds write vulnerability exists in the handling of the client-output-buffer-limit option during the CONFIG SET command for the Redis data structure store. A crafted CONFIG SET command can lead to an out of bounds write potentially resulting in code execution.