CVE-2016-8596 Buffer overflow in the csp_can_process_frame in csp_if_can.c in the libcsp library v1.4 and earlier allows hostile components connected to the canbus to execute arbitrary code via a long csp packet.
CriticalCVSS 9.8
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the csp_can_process_frame in csp_if_can.c in the libcsp library v1.4 and earlier allows hostile components connected to the canbus to execute arbitrary code via a long csp packet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| libcsp | <= 1.4 | No fix listed |
References
- 94226 vdb-entry
- github.com patch vendor-advisory