vulnerability

Ubuntu: USN-4531-1 (CVE-2018-1000500): BusyBox vulnerability

Try Surface Command
Back to search
Severity
7
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Published
Jun 26, 2018
Added
Sep 23, 2020
Modified
Aug 18, 2025

Description

Busybox contains a Missing SSL certificate validation vulnerability in The "busybox wget" applet that can result in arbitrary code execution. This attack appear to be exploitable via Simply download any file over HTTPS using "busybox wget https://compromised-domain.com/important-file".

Solutions

ubuntu-upgrade-busyboxubuntu-upgrade-busybox-initramfsubuntu-upgrade-busybox-static

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today