PT-2017-14253 · Busybox+1 · Busybox+1

Ariel Zelivansky · Published 2017-10-24 · Updated 2024-06-15 · CVE-2017-15874

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions BusyBox version 1.27.2

Description The issue is related to an Integer Underflow in the decompress unlzma.c file of BusyBox, which leads to a read access violation.

Recommendations For BusyBox version 1.27.2, update to a newer version that contains a fix for this issue.

Exploit

Fix

Integer Underflow

Weakness Enumeration

CWE-191

Related Identifiers

CVE-2017-15874

OPENSUSE-SU-2022:0135-1

OPENSUSE-SU-2022_0135-1

OPENSUSE-SU-2022_3959-1

OPENSUSE-SU-2024:11738-1

SUSE-SU-2022:0135-1

SUSE-SU-2022:0135-2

SUSE-SU-2022:3959-1

SUSE-SU-2022:4253-1

Affected Products

Busybox

Suse

References · 152

• 🔥 https://bugs.busybox.net/show_bug.cgi?id=10436 · Exploit
• https://bdu.fstec.ru/vul/2021-03364 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:11738-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-05992 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2022:0135-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-03343 · Security Note
• https://bdu.fstec.ru/vul/2025-05995 · Security Note
• https://bdu.fstec.ru/vul/2021-06387 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2022:0135-2 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-03341 · Security Note
• https://bdu.fstec.ru/vul/2021-03344 · Security Note
• https://bdu.fstec.ru/vul/2025-06000 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2022:4253-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-03800 · Security Note
• https://bdu.fstec.ru/vul/2021-06386 · Security Note