CVE-2016-8859: Integer Overflow
Published Feb 13, 2017
·Updated
Last updated 24 July 2024
Other sources
Multiple integer overflows in the TRE library and musl libc allow attackers to cause memory corruption via a large number of (1) states or (2) tags, which triggers an out-of-bounds write.
Affected Software
3 affected componentsFixes available
debian/musl
1.2.2-11.2.3-11.2.5-1.1
debian/tre
0.8.0-60.8.0-70.8.0-8
Etalabs Musl<=1.1.15
Remediation
Event History
Feb 13, 2017
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
via NVD·06:59 PM
DescriptionSeverityWeaknessAffected Software
Aug 5, 2024
Data Sourced
via Launchpad·12:41 PM
Description
Sep 14, 2024
Data Sourced
via Ubuntu·12:45 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-8859?
CVE-2016-8859 has a high severity level due to its potential to cause memory corruption.
2
How do I fix CVE-2016-8859?
To fix CVE-2016-8859, upgrade the TRE library or musl libc to versions that are not affected by this vulnerability.
3
Which versions of musl are affected by CVE-2016-8859?
CVE-2016-8859 affects musl versions up to and including 1.1.15.
4
Which versions of TRE are affected by CVE-2016-8859?
Affected TRE versions include 0.8.0-6, 0.8.0-7, and 0.8.0-8.
5
What types of attacks can CVE-2016-8859 enable?
CVE-2016-8859 can enable attacks that lead to memory corruption through integer overflow vulnerabilities.