CVE-2016-8339

A buffer overflow in Redis 3.2.x prior to 3.2.4 causes arbitrary code execution when a crafted command is sent. An out of bounds write vulnerability exists in the handling of the client-output-buffer-limit option during the CONFIG SET command for the Redis data structure store. A crafted CONFIG SET command can lead to an out of bounds write potentially resulting in code execution.

• CWE-787

• http://www.securityfocus.com/bid/93283Third Party Advisory, VDB Entry
• http://www.talosintelligence.com/reports/TALOS-2016-0206/Exploit, Third Party Advisory
• https://github.com/antirez/redis/commit/6d9f8e2462fc2c426d48c941edeb78e5df7d2977Patch, Third Party Advisory
• https://security.gentoo.org/glsa/201702-16Third Party Advisory
• http://www.securityfocus.com/bid/93283Third Party Advisory, VDB Entry
• http://www.talosintelligence.com/reports/TALOS-2016-0206/Exploit, Third Party Advisory
• https://github.com/antirez/redis/commit/6d9f8e2462fc2c426d48c941edeb78e5df7d2977Patch, Third Party Advisory
• https://security.gentoo.org/glsa/201702-16Third Party Advisory

Published

Oct 28, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-8331An exploitable remote code execution vulnerability exists in…8.1
• CVE-2016-8332A buffer overflow in OpenJPEG 2.1.1 causes arbitrary code ex…7.5
• CVE-2016-8333An exploitable stack-based buffer overflow vulnerability exi…8.8
• CVE-2016-8334A large out-of-bounds read on the heap vulnerability in Foxi…6.8
• CVE-2016-8335An exploitable stack based buffer overflow vulnerability exi…8.8
• CVE-2016-8338Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-8341An issue was discovered in Ecava IntegraXor Version 5.0.413.…
• CVE-2016-8342Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-8343Directory traversal vulnerability in INDAS Web SCADA before …
• CVE-2016-8344An issue was discovered in Honeywell Experion Process Knowle…
• CVE-2016-8345Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-8346An issue was discovered in Moxa EDR-810 Industrial Secure Ro…