CVE-2016-8597
CriticalSummary
Buffer overflow in the csp_sfp_recv_fp function in csp_sfp.c in the libcsp library v1.4 and earlier allows hostile components with network access to the SFP underlying network layers to execute arbitrary code via specially crafted SFP packets.
Risk Assessment
This vulnerability may lead to remote code execution, posing a serious security risk to systems using this library.
Recommendation
It is recommended to update the libcsp library to a version newer than 1.4 to mitigate the risk associated with this vulnerability.
Other vulnerabilities in libcsp library
See all- CVE-2016-8598Critical
Buffer overflow in the zmq interface in csp_if_zmqhub.c in the libcsp library v1.4 and earlier allows hostile computers connected via a zmq interface to execute arbitrary code via a long packet.
- CVE-2016-8596Critical
Buffer overflow in the csp_can_process_frame function in the libcsp library v1.4 and earlier allows hostile components connected to the canbus to execute arbitrary code via a long csp packet.
Original NVD description (English source)
Buffer overflow in the csp_sfp_recv_fp in csp_sfp.c in the libcsp library v1.4 and earlier allows hostile components with network access to the SFP underlying network layers to execute arbitrary code via specially crafted SFP packets.