This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2016-8859 →
DEBIAN-CVE-2016-8859
Multiple integer overflows in the TRE library and musl libc allow attackers to cause memory corruption via a large number of (1) states or (2) tags, w...
Original description
The description as published by the source.
Multiple integer overflows in the TRE library and musl libc allow attackers to cause memory corruption via a large number of (1) states or (2) tags, which triggers an out-of-bounds write.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
musl
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.15-2"}]}]
Debian:13
musl
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.15-2"}]}]
Debian:14
musl
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.15-2"}]}]
Debian:12
tre
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0-5"}]}]
Debian:13
tre
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0-5"}]}]
Debian:14
tre
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0-5"}]}]
References
- advisory security-tracker.debian.org