CVE-2016-8597

Critical

Published: 28/10/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Buffer overflow in the csp_sfp_recv_fp function in csp_sfp.c in the libcsp library v1.4 and earlier allows hostile components with network access to the SFP underlying network layers to execute arbitrary code via specially crafted SFP packets.

Risk Assessment

This vulnerability may lead to remote code execution, posing a serious security risk to systems using this library.

Recommendation

It is recommended to update the libcsp library to a version newer than 1.4 to mitigate the risk associated with this vulnerability.

Original NVD description (English source)

Buffer overflow in the csp_sfp_recv_fp in csp_sfp.c in the libcsp library v1.4 and earlier allows hostile components with network access to the SFP underlying network layers to execute arbitrary code via specially crafted SFP packets.