Summary
It was discovered that the BusyBox wget applet incorrectly validated SSL
certificates. A remote attacker could possibly use this issue to intercept
secure communications.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | busybox | 1:1.27.2-2ubuntu3.3 |
| Ubuntu · 20.04 LTS 20.04:LTS | busybox | 1:1.30.1-4ubuntu6.2 |
Vulnerabilities 1
-
Medium 6.5
Busybox contains a Missing SSL certificate validation vulnerability in The "busybox wget" applet that can result in arb…
References
-
report
https://ubuntu.com/security/CVE-2018-1000500