PT-2017-14253 · Busybox+1 · Busybox+1

Ariel Zelivansky · Publicado 2017-10-24 · Atualizado 2024-06-15 · CVE-2017-15874

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions BusyBox version 1.27.2

Description The issue is related to an Integer Underflow in the decompress unlzma.c file of BusyBox, which leads to a read access violation.

Recommendations For BusyBox version 1.27.2, update to a newer version that contains a fix for this issue.

Exploit

Correção

Integer Underflow

Enumeração de Fraquezas

CWE-191

Identificadores relacionados

CVE-2017-15874

OPENSUSE-SU-2022:0135-1

OPENSUSE-SU-2022_0135-1

OPENSUSE-SU-2022_3959-1

OPENSUSE-SU-2024:11738-1

SUSE-SU-2022:0135-1

SUSE-SU-2022:0135-2

SUSE-SU-2022:3959-1

SUSE-SU-2022:4253-1

Produtos afetados

Busybox

Suse

Referências · 152

• 🔥 https://bugs.busybox.net/show_bug.cgi?id=10436 · Exploit
• https://bdu.fstec.ru/vul/2021-03364 · Nota de Segurança
• http://openwall.com/lists/oss-security/2015/10/25/3 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:11738-1 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2025-05992 · Nota de Segurança
• https://suse.com/security/cve/CVE-2014-9645 · Nota
• https://suse.com/support/update/announcement/2022/suse-su-20224253-1 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2022:0135-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2021-42382 · Nota
• https://bugzilla.suse.com/1099260 · Nota
• https://bdu.fstec.ru/vul/2021-03343 · Nota de Segurança
• https://suse.com/security/cve/CVE-2021-42379 · Nota
• http://seclists.org/fulldisclosure/2020/Mar/15 · Nota
• https://suse.com/security/cve/CVE-2011-5325.html · Nota
• https://bugzilla.suse.com/1069412 · Nota