CVE-2017-16544 In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of filenames in a directory, does not sanitize filenames and resu...
HighCVSS 8.8
EPSS 6.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of filenames in a directory, does not sanitize filenames and results in executing any escape sequence in the terminal. This could potentially result in code execution, arbitrary file writes, or other attacks.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/busybox(Debian:12) | < 1:1.27.2-2 | 1:1.27.2-2 |
| debian/busybox(Debian:13) | < 1:1.27.2-2 | 1:1.27.2-2 |
| debian/busybox(Debian:14) | < 1:1.27.2-2 | 1:1.27.2-2 |
| busybox | <= 1.27.2 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| VMware esxi | = 6.0 | No fix listed |
| VMware esxi | = 6.0-1 | No fix listed |
| VMware esxi | = 6.0-1a | No fix listed |
| VMware esxi | = 6.0-1b | No fix listed |
| VMware esxi | = 6.0-2 | No fix listed |
| VMware esxi | = 6.0-3 | No fix listed |
| VMware esxi | = 6.0-3a | No fix listed |
| VMware esxi | = 6.0-600-201504401 | No fix listed |
| VMware esxi | = 6.0-600-201505401 | No fix listed |
| VMware esxi | = 6.0-600-201507101 | No fix listed |
| VMware esxi | = 6.0-600-201507102 | No fix listed |
| VMware esxi | = 6.0-600-201507401 | No fix listed |
| VMware esxi | = 6.0-600-201507402 | No fix listed |
| VMware esxi | = 6.0-600-201507403 | No fix listed |
| VMware esxi | = 6.0-600-201507404 | No fix listed |
| VMware esxi | = 6.0-600-201507405 | No fix listed |
| VMware esxi | = 6.0-600-201507406 | No fix listed |
| VMware esxi | = 6.0-600-201507407 | No fix listed |
| VMware esxi | = 6.0-600-201509101 | No fix listed |
Show 175 more
| Product | Affected versions | Fixed in |
|---|---|---|
| VMware esxi | = 6.0-600-201509102 | No fix listed |
| VMware esxi | = 6.0-600-201509201 | No fix listed |
| VMware esxi | = 6.0-600-201509202 | No fix listed |
| VMware esxi | = 6.0-600-201509203 | No fix listed |
| VMware esxi | = 6.0-600-201509204 | No fix listed |
| VMware esxi | = 6.0-600-201509205 | No fix listed |
| VMware esxi | = 6.0-600-201509206 | No fix listed |
| VMware esxi | = 6.0-600-201509207 | No fix listed |
| VMware esxi | = 6.0-600-201509208 | No fix listed |
| VMware esxi | = 6.0-600-201509209 | No fix listed |
| VMware esxi | = 6.0-600-201509210 | No fix listed |
| VMware esxi | = 6.0-600-201510401 | No fix listed |
| VMware esxi | = 6.0-600-201511401 | No fix listed |
| VMware esxi | = 6.0-600-201601101 | No fix listed |
| VMware esxi | = 6.0-600-201601102 | No fix listed |
| VMware esxi | = 6.0-600-201601401 | No fix listed |
| VMware esxi | = 6.0-600-201601402 | No fix listed |
| VMware esxi | = 6.0-600-201601403 | No fix listed |
| VMware esxi | = 6.0-600-201601404 | No fix listed |
| VMware esxi | = 6.0-600-201601405 | No fix listed |
| VMware esxi | = 6.0-600-201602401 | No fix listed |
| VMware esxi | = 6.0-600-201603101 | No fix listed |
| VMware esxi | = 6.0-600-201603102 | No fix listed |
| VMware esxi | = 6.0-600-201603201 | No fix listed |
| VMware esxi | = 6.0-600-201603202 | No fix listed |
| VMware esxi | = 6.0-600-201603203 | No fix listed |
| VMware esxi | = 6.0-600-201603204 | No fix listed |
| VMware esxi | = 6.0-600-201603205 | No fix listed |
| VMware esxi | = 6.0-600-201603206 | No fix listed |
| VMware esxi | = 6.0-600-201603207 | No fix listed |
| VMware esxi | = 6.0-600-201603208 | No fix listed |
| VMware esxi | = 6.0-600-201605401 | No fix listed |
| VMware esxi | = 6.0-600-201608101 | No fix listed |
| VMware esxi | = 6.0-600-201608401 | No fix listed |
| VMware esxi | = 6.0-600-201608402 | No fix listed |
| VMware esxi | = 6.0-600-201608403 | No fix listed |
| VMware esxi | = 6.0-600-201608404 | No fix listed |
| VMware esxi | = 6.0-600-201608405 | No fix listed |
| VMware esxi | = 6.0-600-201610410 | No fix listed |
| VMware esxi | = 6.0-600-201611401 | No fix listed |
| VMware esxi | = 6.0-600-201611402 | No fix listed |
| VMware esxi | = 6.0-600-201611403 | No fix listed |
| VMware esxi | = 6.0-600-201702101 | No fix listed |
| VMware esxi | = 6.0-600-201702102 | No fix listed |
| VMware esxi | = 6.0-600-201702201 | No fix listed |
| VMware esxi | = 6.0-600-201702202 | No fix listed |
| VMware esxi | = 6.0-600-201702203 | No fix listed |
| VMware esxi | = 6.0-600-201702204 | No fix listed |
| VMware esxi | = 6.0-600-201702205 | No fix listed |
| VMware esxi | = 6.0-600-201702206 | No fix listed |
| VMware esxi | = 6.0-600-201702207 | No fix listed |
| VMware esxi | = 6.0-600-201702208 | No fix listed |
| VMware esxi | = 6.0-600-201702209 | No fix listed |
| VMware esxi | = 6.0-600-201702210 | No fix listed |
| VMware esxi | = 6.0-600-201702211 | No fix listed |
| VMware esxi | = 6.0-600-201702212 | No fix listed |
| VMware esxi | = 6.0-600-201703401 | No fix listed |
| VMware esxi | = 6.0-600-201706101 | No fix listed |
| VMware esxi | = 6.0-600-201706102 | No fix listed |
| VMware esxi | = 6.0-600-201706103 | No fix listed |
| VMware esxi | = 6.0-600-201706401 | No fix listed |
| VMware esxi | = 6.0-600-201706402 | No fix listed |
| VMware esxi | = 6.0-600-201706403 | No fix listed |
| VMware esxi | = 6.0-600-201710301 | No fix listed |
| VMware esxi | = 6.0-600-201811001 | No fix listed |
| VMware esxi | = 6.0-600-201811401 | No fix listed |
| VMware esxi | = 6.0-600-201903001 | No fix listed |
| VMware esxi | = 6.0-600-201905001 | No fix listed |
| VMware esxi | = 6.0-600-201909001 | No fix listed |
| VMware esxi | = 6.5 | No fix listed |
| VMware esxi | = 6.5-650-201701001 | No fix listed |
| VMware esxi | = 6.5-650-201703001 | No fix listed |
| VMware esxi | = 6.5-650-201703002 | No fix listed |
| VMware esxi | = 6.5-650-201704001 | No fix listed |
| VMware esxi | = 6.5-650-201707101 | No fix listed |
| VMware esxi | = 6.5-650-201707102 | No fix listed |
| VMware esxi | = 6.5-650-201707103 | No fix listed |
| VMware esxi | = 6.5-650-201707201 | No fix listed |
| VMware esxi | = 6.5-650-201707202 | No fix listed |
| VMware esxi | = 6.5-650-201707203 | No fix listed |
| VMware esxi | = 6.5-650-201707204 | No fix listed |
| VMware esxi | = 6.5-650-201707205 | No fix listed |
| VMware esxi | = 6.5-650-201707206 | No fix listed |
| VMware esxi | = 6.5-650-201707207 | No fix listed |
| VMware esxi | = 6.5-650-201707208 | No fix listed |
| VMware esxi | = 6.5-650-201707209 | No fix listed |
| VMware esxi | = 6.5-650-201707210 | No fix listed |
| VMware esxi | = 6.5-650-201707211 | No fix listed |
| VMware esxi | = 6.5-650-201707212 | No fix listed |
| VMware esxi | = 6.5-650-201707213 | No fix listed |
| VMware esxi | = 6.5-650-201707214 | No fix listed |
| VMware esxi | = 6.5-650-201707215 | No fix listed |
| VMware esxi | = 6.5-650-201707216 | No fix listed |
| VMware esxi | = 6.5-650-201707217 | No fix listed |
| VMware esxi | = 6.5-650-201707218 | No fix listed |
| VMware esxi | = 6.5-650-201707219 | No fix listed |
| VMware esxi | = 6.5-650-201707220 | No fix listed |
| VMware esxi | = 6.5-650-201707221 | No fix listed |
| VMware esxi | = 6.5-650-201710001 | No fix listed |
| VMware esxi | = 6.5-650-201712001 | No fix listed |
| VMware esxi | = 6.5-650-201803001 | No fix listed |
| VMware esxi | = 6.5-650-201806001 | No fix listed |
| VMware esxi | = 6.5-650-201808001 | No fix listed |
| VMware esxi | = 6.5-650-201810001 | No fix listed |
| VMware esxi | = 6.5-650-201810002 | No fix listed |
| VMware esxi | = 6.5-650-201811001 | No fix listed |
| VMware esxi | = 6.5-650-201811002 | No fix listed |
| VMware esxi | = 6.5-650-201811301 | No fix listed |
| VMware esxi | = 6.5-650-201901001 | No fix listed |
| VMware esxi | = 6.5-650-201903001 | No fix listed |
| VMware esxi | = 6.5-650-201905001 | No fix listed |
| VMware esxi | = 6.7 | No fix listed |
| VMware esxi | = 6.7-670-201806001 | No fix listed |
| VMware esxi | = 6.7-670-201807001 | No fix listed |
| VMware esxi | = 6.7-670-201808001 | No fix listed |
| VMware esxi | = 6.7-670-201810001 | No fix listed |
| VMware esxi | = 6.7-670-201810101 | No fix listed |
| VMware esxi | = 6.7-670-201810102 | No fix listed |
| VMware esxi | = 6.7-670-201810103 | No fix listed |
| VMware esxi | = 6.7-670-201810201 | No fix listed |
| VMware esxi | = 6.7-670-201810202 | No fix listed |
| VMware esxi | = 6.7-670-201810203 | No fix listed |
| VMware esxi | = 6.7-670-201810204 | No fix listed |
| VMware esxi | = 6.7-670-201810205 | No fix listed |
| VMware esxi | = 6.7-670-201810206 | No fix listed |
| VMware esxi | = 6.7-670-201810207 | No fix listed |
| VMware esxi | = 6.7-670-201810208 | No fix listed |
| VMware esxi | = 6.7-670-201810209 | No fix listed |
| VMware esxi | = 6.7-670-201810210 | No fix listed |
| VMware esxi | = 6.7-670-201810211 | No fix listed |
| VMware esxi | = 6.7-670-201810212 | No fix listed |
| VMware esxi | = 6.7-670-201810213 | No fix listed |
| VMware esxi | = 6.7-670-201810214 | No fix listed |
| VMware esxi | = 6.7-670-201810215 | No fix listed |
| VMware esxi | = 6.7-670-201810216 | No fix listed |
| VMware esxi | = 6.7-670-201810217 | No fix listed |
| VMware esxi | = 6.7-670-201810218 | No fix listed |
| VMware esxi | = 6.7-670-201810219 | No fix listed |
| VMware esxi | = 6.7-670-201810220 | No fix listed |
| VMware esxi | = 6.7-670-201810221 | No fix listed |
| VMware esxi | = 6.7-670-201810222 | No fix listed |
| VMware esxi | = 6.7-670-201810223 | No fix listed |
| VMware esxi | = 6.7-670-201810224 | No fix listed |
| VMware esxi | = 6.7-670-201810225 | No fix listed |
| VMware esxi | = 6.7-670-201810226 | No fix listed |
| VMware esxi | = 6.7-670-201810227 | No fix listed |
| VMware esxi | = 6.7-670-201810228 | No fix listed |
| VMware esxi | = 6.7-670-201810229 | No fix listed |
| VMware esxi | = 6.7-670-201810230 | No fix listed |
| VMware esxi | = 6.7-670-201810231 | No fix listed |
| VMware esxi | = 6.7-670-201810232 | No fix listed |
| VMware esxi | = 6.7-670-201810233 | No fix listed |
| VMware esxi | = 6.7-670-201810234 | No fix listed |
| VMware esxi | = 6.7-670-201811001 | No fix listed |
| VMware esxi | = 6.7-670-201901001 | No fix listed |
| VMware esxi | = 6.7-670-201901401 | No fix listed |
| VMware esxi | = 6.7-670-201901402 | No fix listed |
| VMware esxi | = 6.7-670-201901403 | No fix listed |
| VMware esxi | = 6.7-670-201903001 | No fix listed |
| VMware esxi | = 6.7-670-201904001 | No fix listed |
| redlion n-tron 702-w firmware | All versions | No fix listed |
| redlion n-tron 702m12-w firmware | All versions | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| alpine/busybox(Alpine:v3.10) | < 1.27.2-r4 | 1.27.2-r4 |
| alpine/busybox(Alpine:v3.11) | < 1.27.2-r4 | 1.27.2-r4 |
| alpine/busybox(Alpine:v3.12) | < 1.27.2-r4 | 1.27.2-r4 |
| alpine/busybox(Alpine:v3.13) | < 1.27.2-r4 | 1.27.2-r4 |
| alpine/busybox(Alpine:v3.14) | < 1.27.2-r4 | 1.27.2-r4 |
| alpine/busybox(Alpine:v3.15) | < 1.27.2-r4 | 1.27.2-r4 |
| alpine/busybox(Alpine:v3.16) | < 1.27.2-r4 | 1.27.2-r4 |
| alpine/busybox(Alpine:v3.17) | < 1.27.2-r4 | 1.27.2-r4 |
| alpine/busybox(Alpine:v3.18) | < 1.27.2-r4 | 1.27.2-r4 |
| alpine/busybox(Alpine:v3.19) | < 1.27.2-r4 | 1.27.2-r4 |
| alpine/busybox(Alpine:v3.20) | < 1.27.2-r4 | 1.27.2-r4 |
References
- Debian Security Tracker CVE-2017-16544 vendor-advisory
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20190612 SEC Consult SA-20190612-0 :: Multiple vulnerabilities in WAGO 852 Industrial Managed Switch Series exploit mailing-list third-party-advisory
- 20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X exploit mailing-list third-party-advisory
- 20200827 SEC Consult SA-20200827-0 :: Multiple Vulnerabilities in ZTE mobile Hotspot MS910S exploit mailing-list third-party-advisory
- 20200313 SEC Consult SA-20200312-0 :: Authenticated Command Injection in Phoenix Contact TC Router & TC Cloud Client exploit mailing-list third-party-advisory
- 20200902 SEC Consult SA-20200902-0 :: Multiple Vulnerabilities in Red Lion N-Tron 702-W, Red Lion N-Tron 702M12-W exploit mailing-list third-party-advisory
- 20210819 SEC Consult SA-20210819-0 :: Multiple critical vulnerabilities in Altus Nexto and Hadron series exploit mailing-list third-party-advisory
- 20210113 SEC Consult SA-20210113-0 :: Multiple vulnerabilities in Pepperl+Fuchs IO-Link Master Series exploit mailing-list third-party-advisory
- 20220617 SEC Consult SA-20220615-0 :: Hardcoded Backdoor User and Outdated Software Components in Nexans FTTO GigaSwitch series exploit mailing-list third-party-advisory
- www.vmware.com third-party-advisory
- git.busybox.net patch vendor-advisory
- [debian-lts-announce] 20180727 [SECURITY] [DLA 1445-1] busybox security update mailing-list third-party-advisory
- [debian-lts-announce] 20210215 [SECURITY] [DLA 2559-1] busybox security update mailing-list third-party-advisory
- 20190613 SEC Consult SA-20190612-0 :: Multiple vulnerabilities in WAGO 852 Industrial Managed Switch Series exploit mailing-list third-party-advisory
- 20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X exploit mailing-list third-party-advisory
- us-cert.cisa.gov third-party-advisory us-government-resource
- USN-3935-1 third-party-advisory vendor-advisory
- www.twistlock.com third-party-advisory
- security.alpinelinux.org vendor-advisory
- bugs.debian.org issue-tracking