CVE-2016-8859

Critical

Description

Multiple integer overflows in the TRE library and musl libc allow attackers to cause memory corruption via a large number of (1) states or (2) tags, which triggers an out-of-bounds write.

SeverityCritical
CVSS9.8
Exploit probability—
ProductEtalabs Musl
PublishedFeb 13, 2017
First seenFeb 13, 2017

How to fix

Affected products

ProductAffected versionsFixed in
etalabs muslv ≤ 1.1.15—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2016-8859 · Etalabs Musl · Dark Radar