BusyBox vulnerabilities

2024-08-1400:00:00

ubuntu.com

busybox

ubuntu

vulnerabilities

denial of service

arbitrary code

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.002

Percentile

59.4%

JSON

Releases

Ubuntu 24.04 LTS
Ubuntu 22.04 LTS
Ubuntu 20.04 LTS

Packages

busybox - Tiny utilities for small and embedded systems

Details

It was discovered that BusyBox did not properly validate user input when
performing certain arithmetic operations. If a user or automated system
were tricked into processing a specially crafted file, an attacker could
possibly use this issue to cause a denial of service, or execute arbitrary
code. (CVE-2022-48174)

It was discovered that BusyBox incorrectly managed memory when evaluating
certain awk expressions. An attacker could possibly use this issue to cause
a denial of service, or execute arbitrary code. This issue only affected
Ubuntu 24.04 LTS. (CVE-2023-42363, CVE-2023-42364, CVE-2023-42365)

OSVersionArchitecturePackageVersionFilename
Ubuntu24.04noarchbusybox< 1:1.36.1-6ubuntu3.1UNKNOWN
Ubuntu24.04noarchbusybox-dbgsym< 1:1.36.1-6ubuntu3.1UNKNOWN
Ubuntu24.04noarchbusybox-initramfs< 1:1.36.1-6ubuntu3.1UNKNOWN
Ubuntu24.04noarchbusybox-initramfs-dbgsym< 1:1.36.1-6ubuntu3.1UNKNOWN
Ubuntu24.04noarchbusybox-static< 1:1.36.1-6ubuntu3.1UNKNOWN
Ubuntu24.04noarchbusybox-static-dbgsym< 1:1.36.1-6ubuntu3.1UNKNOWN
Ubuntu24.04noarchbusybox-syslogd< 1:1.36.1-6ubuntu3.1UNKNOWN
Ubuntu24.04noarchudhcpc< 1:1.36.1-6ubuntu3.1UNKNOWN
Ubuntu24.04noarchudhcpd< 1:1.36.1-6ubuntu3.1UNKNOWN
Ubuntu22.04noarchbusybox< 1:1.30.1-7ubuntu3.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	24.04	noarch	busybox	< 1:1.36.1-6ubuntu3.1	UNKNOWN
Ubuntu	24.04	noarch	busybox-dbgsym	< 1:1.36.1-6ubuntu3.1	UNKNOWN
Ubuntu	24.04	noarch	busybox-initramfs	< 1:1.36.1-6ubuntu3.1	UNKNOWN
Ubuntu	24.04	noarch	busybox-initramfs-dbgsym	< 1:1.36.1-6ubuntu3.1	UNKNOWN
Ubuntu	24.04	noarch	busybox-static	< 1:1.36.1-6ubuntu3.1	UNKNOWN
Ubuntu	24.04	noarch	busybox-static-dbgsym	< 1:1.36.1-6ubuntu3.1	UNKNOWN
Ubuntu	24.04	noarch	busybox-syslogd	< 1:1.36.1-6ubuntu3.1	UNKNOWN
Ubuntu	24.04	noarch	udhcpc	< 1:1.36.1-6ubuntu3.1	UNKNOWN
Ubuntu	24.04	noarch	udhcpd	< 1:1.36.1-6ubuntu3.1	UNKNOWN
Ubuntu	22.04	noarch	busybox	< 1:1.30.1-7ubuntu3.1	UNKNOWN