busybox - security update

Fixed packages 1

Vulnerabilities 8

• High 8.8
  CVE-2017-16544

  In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, use…

  busybox busybox busybox Debian Ubuntu Alpine
  Nov 20, 2017
• High 8.0
  CVE-2018-1000517 EPSS 32%

  BusyBox project BusyBox wget version prior to commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e contains a Buffer Overflo…

  busybox busybox Debian Ubuntu
  Jun 26, 2018
• Medium 5.5
  CVE-2017-15873

  The get_next_block function in archival/libarchive/decompress_bunzip2.c in BusyBox 1.27.2 has an Integer Overflow that …

  busybox busybox busybox Debian Ubuntu Alpine
  Oct 24, 2017
• Unscored —
  CVE-2011-5325

  Directory traversal vulnerability in the BusyBox implementation of tar before 1.22.0 v5 allows remote attackers to poin…

  busybox busybox Debian Ubuntu
  Aug 7, 2017
• Unscored —
  CVE-2014-9645

  The add_probe function in modutils/modprobe.c in BusyBox before 1.23.0 allows local users to bypass intended restrictio…

  busybox busybox Debian Ubuntu
  Mar 12, 2017
• Unscored —
  CVE-2015-9261

  huft_build in archival/libarchive/decompress_gunzip.c in BusyBox before 1.27.2 misuses a pointer, causing segfaults and…

  busybox busybox Debian Ubuntu
  Jul 26, 2018
• Unscored —
  CVE-2016-2147

  Integer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to cause a denial of serv…

  busybox busybox busybox Debian Ubuntu Alpine
  Feb 9, 2017
• Unscored —
  CVE-2016-2148 EPSS 27%

  Heap-based buffer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to have unspeci…

  busybox busybox busybox Debian Ubuntu Alpine
  Feb 9, 2017