CVE-2022-48174

Related Files

Red Hat Security Advisory 2023-5178-01

Posted Sep 18, 2023

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2023-5178-01 - BusyBox is a binary file that combines a large number of common system utilities into a single executable file. BusyBox provides replacements for most GNU file utilities, shell utilities, and other command-line tools. Issues addressed include a code execution vulnerability.

tags | advisory, shell, code execution

systems | linux, redhat

advisories | CVE-2022-48174

SHA-256 | 7c72db5f7b570141670662cc2dbbef8381317a72432a3def63d5b819c76bcea1

Download | Favorite | View

Ubuntu Security Notice USN-6335-1

Posted Sep 4, 2023

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 6335-1 - It was discovered that BusyBox incorrectly handled certain malformed gzip archives. If a user or automated system were tricked into processing a specially crafted gzip archive, a remote attacker could use this issue to cause BusyBox to crash, resulting in a denial of service, or execute arbitrary code. This issue only affected Ubuntu 14.04 LTS. It was discovered that BusyBox did not properly validate user input when performing certain arithmetic operations. If a user or automated system were tricked into processing a specially crafted file, an attacker could possibly use this issue to cause BusyBox to crash, resulting in a denial of service, or execute arbitrary code.

tags | advisory, remote, denial of service, arbitrary

systems | linux, ubuntu

advisories | CVE-2021-28831, CVE-2022-48174

SHA-256 | ce6cd273a2adefd9dc9d4b39d27ed6ba12c30e3105c870f8b4e96eaa14d28bc3

Download | Favorite | View