CVE-2016-8598
CriticalSummary
Buffer overflow in the zmq interface in csp_if_zmqhub.c in the libcsp library v1.4 and earlier allows hostile computers connected via a zmq interface to execute arbitrary code via a long packet.
Risk Assessment
This vulnerability allows attackers to execute arbitrary code remotely, potentially leading to system compromise or data leakage.
Recommendation
It is recommended to update the libcsp library to a version newer than 1.4 to mitigate this vulnerability.
Other vulnerabilities in libcsp library
See all- CVE-2016-8597Critical
Buffer overflow in the csp_sfp_recv_fp function in csp_sfp.c in the libcsp library v1.4 and earlier allows hostile components with network access to the SFP underlying network layers to execute arbitrary code via specially crafted SFP packets.
- CVE-2016-8596Critical
Buffer overflow in the csp_can_process_frame function in the libcsp library v1.4 and earlier allows hostile components connected to the canbus to execute arbitrary code via a long csp packet.
Original NVD description (English source)
Buffer overflow in the zmq interface in csp_if_zmqhub.c in the libcsp library v1.4 and earlier allows hostile computers connected via a zmq interface to execute arbitrary code via a long packet.