There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade busybox | Mar 26, 2024 | Aug 22, 2023 |
| Amazon_linux | — | Upgrade busybox | Sep 26, 2023 | Aug 22, 2023 |
| Centos_linux | — | Upgrade busybox-petitbootUpgrade busybox | Sep 19, 2023 | Aug 22, 2023 |
| Debian | — | Upgrade busybox | Jan 20, 2025 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade busybox-help | Jan 10, 2024 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade busybox-help | Jan 10, 2024 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade busybox-help | Jan 10, 2024 | Aug 22, 2023 |
| Oracle_linux | — | Upgrade busybox-petitbootUpgrade busybox | Oct 13, 2023 | Aug 22, 2023 |
| Redhat_linux | — | Upgrade busybox-petitbootUpgrade busybox | Sep 19, 2023 | Aug 22, 2023 |
| Suse | — | Upgrade busybox-bzip2Upgrade busybox-psmiscUpgrade busybox-coreutilsUpgrade busybox-viUpgrade busybox-tarUpgrade busybox-sharutilsUpgrade busybox-shUpgrade busybox-telnetUpgrade busybox-kbdUpgrade busybox-manUpgrade busybox-whichUpgrade busybox-diffutilsUpgrade busybox-bcUpgrade busybox-bind-utilsUpgrade busybox-whoisUpgrade busybox-miscUpgrade busybox-policycoreutilsUpgrade busybox-wgetUpgrade busybox-attrUpgrade busybox-edUpgrade busybox-findutilsUpgrade busybox-iproute2Upgrade busybox-warewulf3Upgrade busybox-linksUpgrade busybox-tftpUpgrade busybox-util-linuxUpgrade busybox-timeUpgrade busybox-lessUpgrade busybox-netcatUpgrade busybox-sendmailUpgrade busybox-cpioUpgrade busyboxUpgrade busybox-adduserUpgrade busybox-net-toolsUpgrade busybox-hostnameUpgrade busybox-tracerouteUpgrade busybox-sedUpgrade busybox-gzipUpgrade busybox-gawkUpgrade busybox-vlanUpgrade busybox-selinux-toolsUpgrade busybox-grepUpgrade busybox-tunctlUpgrade busybox-xzUpgrade busybox-unzipUpgrade busybox-ncurses-utilsUpgrade busybox-iputilsUpgrade busybox-testsuiteUpgrade busybox-kmodUpgrade busybox-syslogdUpgrade busybox-patchUpgrade busybox-dos2unixUpgrade busybox-procpsUpgrade busybox-sysvinit-toolsUpgrade busybox-static | Sep 6, 2023 | Aug 22, 2023 |
| Ubuntu | — | Upgrade busybox-initramfsUpgrade busybox-initramfs (Ubuntu Pro)Upgrade busybox-staticUpgrade busyboxUpgrade busybox-static (Ubuntu Pro)Upgrade busybox (Ubuntu Pro) | Sep 18, 2023 | Aug 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub