CVE-2016-8339 - CVE House
Back to Database
Status published Medium CVE-2016-8339

A buffer overflow in Redis 3.2.x prior to 3.2.4 causes...

Vulnerability Description

A buffer overflow in Redis 3.2.x prior to 3.2.4 causes arbitrary code execution when a crafted command is sent. An out of bounds write vulnerability exists in the handling of the client-output-buffer-limit option during the CONFIG SET command for the Redis data structure store. A crafted CONFIG SET command can lead to an out of bounds write potentially resulting in code execution.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2016-8339

Credits & Attribution

No credits recorded in the NVD database.

References

More from Redis

View All →
CVE-2025-46686
Redis through 8.0.3 allows memory consumption via a multi-bulk command...
Low 3.5

Affected Vendor

Affected Software

Redis
Vulnerable Versions:
3.2.x prior to 3.2.4

Timeline

Official Publish: October 28th, 2016
Last Modified: August 6th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.