There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade busybox | Mar 26, 2024 | Aug 22, 2023 |
| Amazon_linux | — | Upgrade busybox | Sep 26, 2023 | Aug 22, 2023 |
| Centos_linux | — | Upgrade busyboxUpgrade busybox-petitboot | Sep 19, 2023 | Aug 22, 2023 |
| Debian | — | Upgrade busybox | Jan 20, 2025 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade busybox-help | Jan 10, 2024 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade busybox-help | Jan 10, 2024 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade busybox-help | Jan 10, 2024 | Aug 22, 2023 |
| Oracle_linux | — | Upgrade busybox-petitbootUpgrade busybox | Oct 13, 2023 | Aug 22, 2023 |
| Redhat_linux | — | Upgrade busyboxUpgrade busybox-petitboot | Sep 19, 2023 | Aug 22, 2023 |
| Suse | — | Upgrade busybox-sysvinit-toolsUpgrade busybox-procpsUpgrade busybox-gawkUpgrade busybox-syslogdUpgrade busybox-patchUpgrade busybox-dos2unixUpgrade busybox-selinux-toolsUpgrade busybox-staticUpgrade busybox-vlanUpgrade busybox-xzUpgrade busybox-testsuiteUpgrade busybox-tunctlUpgrade busybox-grepUpgrade busybox-gzipUpgrade busybox-iputilsUpgrade busybox-kmodUpgrade busybox-unzipUpgrade busybox-ncurses-utilsUpgrade busybox-shUpgrade busybox-bind-utilsUpgrade busybox-tarUpgrade busybox-net-toolsUpgrade busybox-wgetUpgrade busybox-policycoreutilsUpgrade busybox-coreutilsUpgrade busybox-kbdUpgrade busybox-diffutilsUpgrade busybox-hostnameUpgrade busybox-lessUpgrade busybox-cpioUpgrade busybox-adduserUpgrade busybox-attrUpgrade busybox-viUpgrade busybox-psmiscUpgrade busybox-tftpUpgrade busybox-util-linuxUpgrade busybox-sedUpgrade busybox-tracerouteUpgrade busybox-bzip2Upgrade busybox-netcatUpgrade busyboxUpgrade busybox-miscUpgrade busybox-whoisUpgrade busybox-manUpgrade busybox-sharutilsUpgrade busybox-bcUpgrade busybox-whichUpgrade busybox-sendmailUpgrade busybox-findutilsUpgrade busybox-timeUpgrade busybox-linksUpgrade busybox-iproute2Upgrade busybox-edUpgrade busybox-warewulf3Upgrade busybox-telnet | Sep 6, 2023 | Aug 22, 2023 |
| Ubuntu | — | Upgrade busybox-initramfs (Ubuntu Pro)Upgrade busyboxUpgrade busybox-staticUpgrade busybox-initramfsUpgrade busybox-static (Ubuntu Pro)Upgrade busybox (Ubuntu Pro) | Sep 18, 2023 | Aug 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub