Lucene search

K
redosRedosROS-20220714-01
HistoryJul 14, 2022 - 12:00 a.m.

ROS-20220714-01

2022-07-1400:00:00
redos.red-soft.ru
3

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.011 Low

EPSS

Percentile

84.5%

A vulnerability in the BusyBox command line utility suite is related to incorrect input validation of PTR entries
DNS records output in the netstat utility when run on a VT-compatible terminal. Exploitation
vulnerability could allow an attacker acting remotely to trick the victim into launching the netstat command after establishing a connection.
netstat command after establishing a connection to the system and execute arbitrary OS commands on the target system with the privileges of the user executing the command.
privileges of the user running the netstat command

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64busybox<= 1.34.1-3UNKNOWN

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.011 Low

EPSS

Percentile

84.5%