PT-2018-2731 · Busybox+2 · Busybox+2
Denys Vlasenko
·
Publicado
2018-06-26
·
Atualizado
2024-06-15
·
CVE-2018-1000517
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
BusyBox versions prior to commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e
Description
The issue is related to a Buffer Overflow vulnerability in the BusyBox wget, which can result in a heap buffer overflow. This vulnerability can be exploited via network connectivity, allowing a remote attacker to impact the integrity and availability of data, as well as cause a denial of service.
Recommendations
For BusyBox versions prior to commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e, update to a version that includes the fix after commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e to resolve the issue. As a temporary workaround, consider restricting network connectivity to minimize the risk of exploitation.
Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Busybox
Suse
Ubuntu