CVE-2018-1000517

🗓️ 26 Jun 2018 16:00:00Reported by mitreType

BusyBox wget version prior to commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e contains a Buffer Overflow vulnerability, which can be exploited via network connectivity

Reporter	Title	Published	Views	Family All 78
BDU FSTEC	The vulnerability of the wget console program for downloading files over the network is related to the UNIX utility commands in the BusyBox. This vulnerability stems from the operation of writing data beyond the buffer limit into dynamic memory, allowing an attacker to compromise the integrity and accessibility of data, as well as to cause service failures.	25 Apr 201900:00	–	bdu_fstec
Cloud Foundry	USN-3935-1: BusyBox vulnerabilities \| Cloud Foundry	12 Apr 201900:00	–	cloudfoundry
CloudLinux	busybox: Fix of 4 CVEs	25 Apr 202608:51	–	cloudlinux
CNVD	BusyBox wget buffer overflow vulnerability	28 Jun 201800:00	–	cnvd
CVE	CVE-2018-1000517	26 Jun 201816:00	–	cve
Debian	[SECURITY] [DLA 1445-1] busybox security update	27 Jul 201804:39	–	debian
Debian	[SECURITY] [DLA 2559-1] busybox security update	15 Feb 202111:56	–	debian
Debian CVE	CVE-2018-1000517	26 Jun 201816:00	–	debiancve
Tenable Nessus	Debian DLA-2559-1 : busybox security update	16 Feb 202100:00	–	nessus
Tenable Nessus	openSUSE 15 Security Update : busybox (openSUSE-SU-2021:1408-1)	1 Nov 202100:00	–	nessus

Source	Link
git	www.git.busybox.net/busybox/commit/
usn	www.usn.ubuntu.com/3935-1/
lists	www.lists.debian.org/debian-lts-announce/2021/02/msg00020.html
lists	www.lists.debian.org/debian-lts-announce/2018/07/msg00037.html

15 Feb 2021 13:06Current

9.6High risk

Vulners AI Score9.6

EPSS0.32381