CVE-2016-2148 Heap-based buffer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to have unspecified impact via vectors involving OPTION_6RD parsing.
CriticalCVSS 9.8
EPSS 27.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to have unspecified impact via vectors involving OPTION_6RD parsing.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/busybox(Debian:12) | < 1:1.27.2-1 | 1:1.27.2-1 |
| debian/busybox(Debian:13) | < 1:1.27.2-1 | 1:1.27.2-1 |
| debian/busybox(Debian:14) | < 1:1.27.2-1 | 1:1.27.2-1 |
| busybox | <= 1.24.2 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| Canonical Ubuntu Linux | = 18.04 | No fix listed |
| Canonical Ubuntu Linux | = 18.10 | No fix listed |
| alpine/busybox(Alpine:v3.4) | < 1.24.2-r0 | 1.24.2-r0 |
References
- Debian Security Tracker CVE-2016-2148 vendor-advisory
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20190612 SEC Consult SA-20190612-0 :: Multiple vulnerabilities in WAGO 852 Industrial Managed Switch Series exploit mailing-list third-party-advisory
- 20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X exploit mailing-list third-party-advisory
- 20200827 SEC Consult SA-20200827-0 :: Multiple Vulnerabilities in ZTE mobile Hotspot MS910S exploit mailing-list third-party-advisory
- [oss-security] 20160311 two udhcpc (busybox) issues mailing-list patch third-party-advisory
- busybox.net vendor-advisory
- git.busybox.net patch vendor-advisory
- [debian-lts-announce] 20180727 [SECURITY] [DLA 1445-1] busybox security update mailing-list third-party-advisory
- [debian-lts-announce] 20210215 [SECURITY] [DLA 2559-1] busybox security update mailing-list third-party-advisory
- 20190613 SEC Consult SA-20190612-0 :: Multiple vulnerabilities in WAGO 852 Industrial Managed Switch Series exploit mailing-list third-party-advisory
- 20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X exploit mailing-list third-party-advisory
- GLSA-201612-04 third-party-advisory vendor-advisory
- USN-3935-1 third-party-advisory vendor-advisory
- security.alpinelinux.org vendor-advisory
- bugs.debian.org issue-tracking