onyx --cves cve-2016-8339

CVE-2016-8339

score: <0.1
cvss: 9.8
epss: 14.8%
published: 2016-10-28
kev added: —
first seen: 2026-10-21

Redis 3.2.x prior to 3.2.4 contains a buffer overflow caused by out of bounds write in handling of client-output-buffer-limit during CONFIG SET, letting attackers execute arbitrary code, exploit requires sending crafted CONFIG SET command.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

2016-10-28 Published
2026-10-21 Tracked by Onyx
2026-10-21 Public PoC

Exploit availability

Public PoC flagged by vulnx; no direct exploit link among the citations.

Weaknesses

CWE-787

References 4

https://github.com/antirez/redis/commit/6d9f8e2462fc2c426d48c941edeb78e5df7d2977
https://security.gentoo.org/glsa/201702-16
http://www.securityfocus.com/bid/93283
http://www.talosintelligence.com/reports/TALOS-2016-0206/