Critical severity9.8NVD Advisory· Published Oct 28, 2016· Updated Jun 17, 2026

CVE-2016-8597

Description

Buffer overflow in the csp_sfp_recv_fp in csp_sfp.c in the libcsp library v1.4 and earlier allows hostile components with network access to the SFP underlying network layers to execute arbitrary code via specially crafted SFP packets.

Affected products

Libcsp/Libcsp
cpe:2.3:a:libcsp:libcsp:*:*:*:*:*:*:*:*
Range: <=1.4
GomSpace/libcspllm-create
Range: <=1.4

Patches

Vulnerability mechanics

References

github.com/GomSpace/libcsp/pull/80nvdPatchVendor Advisory
www.securityfocus.com/bid/94226nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000