{"action":"Upgrade redis to 3:3.2.4-1 or later.","affected":[{"fixed":"3:3.2.4-1","introduced":"0"}],"component":"redis","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["3:3.2.4-1"],"id":"tcs_01M5NBRYYNPRCD65H46633YVSF","modified_at":"2026-09-22T07:00:55.146932579Z","published_at":"2016-10-28T14:59:01.603Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2016-8339","https://security-tracker.debian.org/tracker/CVE-2016-8339"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2016-8339#Debian:13/redis","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2016-8339"}],"summary":"A buffer overflow in Redis 3.2.x prior to 3.2.4 causes arbitrary code execution when a crafted command is sent. An out of bounds write vulnerability exists in the handling of the client-output-buffer-"}