CVE-2016-8597

9.8 criticalEPSS 2.3%

Critical (9.8) in libcsp libcsp. EPSS 2.3% chance of exploitation in the next 30 days.

Buffer overflow in the csp_sfp_recv_fp in csp_sfp.c in the libcsp library v1.4 and earlier allows hostile components with network access to the SFP underlying network layers to execute arbitrary code via specially crafted SFP packets.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.3% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2016-10-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

libcsp:libcsp

References

http://www.securityfocus.com/bid/94226
https://github.com/GomSpace/libcsp/pull/80
http://www.securityfocus.com/bid/94226
https://github.com/GomSpace/libcsp/pull/80

Check your stack JSON