DeutschShown in its original language — a full translation is planned for a future version.
BusyBox: Mehrere Schwachstellen
view advisory published 2016-12-05
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in BusyBox ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen oder um einen Denial of Service Zustand herbeizuführen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-2148US | critical9.8 | — | ||
Heap-based buffer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to have unspecified impact via vectors involving OPTION_6RD parsing. | ||||
| CVE-2016-2147US | high7.5 | — | ||
Integer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to cause a denial of service (crash) via a malformed RFC1035-encoded domain name, whic… | ||||
02
references
External citations — patches, advisories, analysis.
- Debian Security Advisory DLA-2559 vom 2021-02-15external
- SUSE Security Update SUSE-SU-2022:0135-2 vom 2022-02-14external
- SUSE Security Update SUSE-SU-2022:3959-1 vom 2022-11-11external
- SUSE Security Update SUSE-SU-2022:4253-1 vom 2022-11-28external
- F5 Security Advisory K000156994 vom 2025-10-14external
- Meldung auf Gentoo.org vom 2016-12-05external
- WID-SEC-W-2022-2031 - CSAF Versionself
- WID-SEC-2022-2031 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan