PT-2018-2731 · Busybox+2 · Busybox+2
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
BusyBox versions prior to commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e
Description
The issue is related to a Buffer Overflow vulnerability in the BusyBox wget, which can result in a heap buffer overflow. This vulnerability can be exploited via network connectivity, allowing a remote attacker to impact the integrity and availability of data, as well as cause a denial of service.
Recommendations
For BusyBox versions prior to commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e, update to a version that includes the fix after commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e to resolve the issue. As a temporary workaround, consider restricting network connectivity to minimize the risk of exploitation.
Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Busybox
Suse
Ubuntu