CVE-2016-8596
CriticalSummary
Buffer overflow in the csp_can_process_frame function in the libcsp library v1.4 and earlier allows hostile components connected to the canbus to execute arbitrary code via a long csp packet.
Risk Assessment
This vulnerability may lead to unauthorized access to the system and potential takeover of devices connected to the canbus network.
Recommendation
It is recommended to update the libcsp library to the latest version to mitigate the risks associated with this vulnerability.
Other vulnerabilities in libcsp library
See all- CVE-2016-8598Critical
Buffer overflow in the zmq interface in csp_if_zmqhub.c in the libcsp library v1.4 and earlier allows hostile computers connected via a zmq interface to execute arbitrary code via a long packet.
- CVE-2016-8597Critical
Buffer overflow in the csp_sfp_recv_fp function in csp_sfp.c in the libcsp library v1.4 and earlier allows hostile components with network access to the SFP underlying network layers to execute arbitrary code via specially crafted SFP packets.
Original NVD description (English source)
Buffer overflow in the csp_can_process_frame in csp_if_can.c in the libcsp library v1.4 and earlier allows hostile components connected to the canbus to execute arbitrary code via a long csp packet.