{ "document": { "aggregate_severity": { "text": "Critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "CVE-2018-1000517: fix heap buffer overflow in wget chunked decoding\n- CVE-2017-16544: reject terminal control sequences in shell tab completion\n- CVE-2018-20679: reject zero-length DHCP options and validate 4-byte option lengths\n- CVE-2019-5747: validate DHCP_SUBNET option length before decoding", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1776959688", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1776959688" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/oraclelinux6els/advisories/2026/clsa-2026_1776959688.json" } ], "tracking": { "current_release_date": "2026-04-23T15:55:32Z", "generator": { "date": "2026-04-23T15:55:32Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1776959688", "initial_release_date": "2026-04-23T15:55:32Z", "revision_history": [ { "date": "2026-04-23T15:55:32Z", "number": "1", "summary": "Initial version" } ], "status": "final", "version": "1" }, "title": "busybox: Fix of 4 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Oracle Linux 6", "product": { "name": "Oracle Linux 6", "product_id": "Oracle-Linux-6", "product_identification_helper": { "cpe": "cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Oracle Linux" } ], "category": "vendor", "name": "Oracle Corporation" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "busybox-petitboot-1:1.15.1-21.el6_6.tuxcare.els3.x86_64", "product": { "name": "busybox-petitboot-1:1.15.1-21.el6_6.tuxcare.els3.x86_64", "product_id": "busybox-petitboot-1:1.15.1-21.el6_6.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/busybox-petitboot@1.15.1-21.el6_6.tuxcare.els3?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "busybox-1:1.15.1-21.el6_6.tuxcare.els3.x86_64", "product": { "name": "busybox-1:1.15.1-21.el6_6.tuxcare.els3.x86_64", "product_id": "busybox-1:1.15.1-21.el6_6.tuxcare.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/busybox@1.15.1-21.el6_6.tuxcare.els3?arch=x86_64&epoch=1" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "CloudLinux" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "busybox-petitboot-1:1.15.1-21.el6_6.tuxcare.els3.x86_64 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:busybox-petitboot-1:1.15.1-21.el6_6.tuxcare.els3.x86_64" }, "product_reference": "busybox-petitboot-1:1.15.1-21.el6_6.tuxcare.els3.x86_64", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "busybox-1:1.15.1-21.el6_6.tuxcare.els3.x86_64 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:busybox-1:1.15.1-21.el6_6.tuxcare.els3.x86_64" }, "product_reference": "busybox-1:1.15.1-21.el6_6.tuxcare.els3.x86_64", "relates_to_product_reference": "Oracle-Linux-6" } ] }, "vulnerabilities": [ { "cve": "CVE-2018-1000517", "cwe": { "id": "CWE-120", "name": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')" }, "notes": [ { "category": "description", "text": "BusyBox project BusyBox wget version prior to commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e contains a Buffer Overflow vulnerability in Busybox wget that can result in heap buffer overflow. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in after commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Oracle-Linux-6:busybox-1:1.15.1-21.el6_6.tuxcare.els3.x86_64", "Oracle-Linux-6:busybox-petitboot-1:1.15.1-21.el6_6.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2018-1000517" }, { "category": "external", "summary": "https://git.busybox.net/busybox/commit/?id=8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e", "url": "https://git.busybox.net/busybox/commit/?id=8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2018/07/msg00037.html", "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00037.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2021/02/msg00020.html", "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00020.html" }, { "category": "external", "summary": "https://usn.ubuntu.com/3935-1/", "url": "https://usn.ubuntu.com/3935-1/" } ], "release_date": "2018-06-26T16:29:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-04-23T15:54:51.440565Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1776959688", "product_ids": [ "Oracle-Linux-6:busybox-1:1.15.1-21.el6_6.tuxcare.els3.x86_64", "Oracle-Linux-6:busybox-petitboot-1:1.15.1-21.el6_6.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1776959688" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Oracle-Linux-6:busybox-1:1.15.1-21.el6_6.tuxcare.els3.x86_64", "Oracle-Linux-6:busybox-petitboot-1:1.15.1-21.el6_6.tuxcare.els3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2018-20679", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "An issue was discovered in BusyBox before 1.30.0. An out of bounds read in udhcp components (consumed by the DHCP server, client, and relay) allows a remote attacker to leak sensitive information from the stack by sending a crafted DHCP message. This is related to verification in udhcp_get_option() in networking/udhcp/common.c that 4-byte options are indeed 4 bytes.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Oracle-Linux-6:busybox-1:1.15.1-21.el6_6.tuxcare.els3.x86_64", "Oracle-Linux-6:busybox-petitboot-1:1.15.1-21.el6_6.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2018-20679" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html", "url": "http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2019/Sep/7", "url": "http://seclists.org/fulldisclosure/2019/Sep/7" }, { "category": "external", "summary": "https://bugs.busybox.net/show_bug.cgi?id=11506", "url": "https://bugs.busybox.net/show_bug.cgi?id=11506" }, { "category": "external", "summary": "https://busybox.net/news.html", "url": "https://busybox.net/news.html" }, { "category": "external", "summary": "https://git.busybox.net/busybox/commit/?id=6d3b4bb24da9a07c263f3c1acf8df85382ff562c", "url": "https://git.busybox.net/busybox/commit/?id=6d3b4bb24da9a07c263f3c1acf8df85382ff562c" }, { "category": "external", "summary": "https://seclists.org/bugtraq/2019/Sep/7", "url": "https://seclists.org/bugtraq/2019/Sep/7" }, { "category": "external", "summary": "https://usn.ubuntu.com/3935-1/", "url": "https://usn.ubuntu.com/3935-1/" } ], "release_date": "2019-01-09T16:29:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-04-23T15:54:51.440565Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1776959688", "product_ids": [ "Oracle-Linux-6:busybox-1:1.15.1-21.el6_6.tuxcare.els3.x86_64", "Oracle-Linux-6:busybox-petitboot-1:1.15.1-21.el6_6.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1776959688" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "baseSeverity": "MEDIUM", "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "Oracle-Linux-6:busybox-1:1.15.1-21.el6_6.tuxcare.els3.x86_64", "Oracle-Linux-6:busybox-petitboot-1:1.15.1-21.el6_6.tuxcare.els3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2019-5747", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "An issue was discovered in BusyBox through 1.30.0. An out of bounds read in udhcp components (consumed by the DHCP client, server, and/or relay) might allow a remote attacker to leak sensitive information from the stack by sending a crafted DHCP message. This is related to assurance of a 4-byte length when decoding DHCP_SUBNET. NOTE: this issue exists because of an incomplete fix for CVE-2018-20679.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Oracle-Linux-6:busybox-1:1.15.1-21.el6_6.tuxcare.els3.x86_64", "Oracle-Linux-6:busybox-petitboot-1:1.15.1-21.el6_6.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2019-5747" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html", "url": "http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2019/Sep/7", "url": "http://seclists.org/fulldisclosure/2019/Sep/7" }, { "category": "external", "summary": "https://bugs.busybox.net/show_bug.cgi?id=11506", "url": "https://bugs.busybox.net/show_bug.cgi?id=11506" }, { "category": "external", "summary": "https://git.busybox.net/busybox/commit/?id=74d9f1ba37010face4bd1449df4d60dd84450b06", "url": "https://git.busybox.net/busybox/commit/?id=74d9f1ba37010face4bd1449df4d60dd84450b06" }, { "category": "external", "summary": "https://seclists.org/bugtraq/2019/Sep/7", "url": "https://seclists.org/bugtraq/2019/Sep/7" }, { "category": "external", "summary": "https://usn.ubuntu.com/3935-1/", "url": "https://usn.ubuntu.com/3935-1/" } ], "release_date": "2019-01-09T16:29:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-04-23T15:54:51.440565Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1776959688", "product_ids": [ "Oracle-Linux-6:busybox-1:1.15.1-21.el6_6.tuxcare.els3.x86_64", "Oracle-Linux-6:busybox-petitboot-1:1.15.1-21.el6_6.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1776959688" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "baseSeverity": "MEDIUM", "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "Oracle-Linux-6:busybox-1:1.15.1-21.el6_6.tuxcare.els3.x86_64", "Oracle-Linux-6:busybox-petitboot-1:1.15.1-21.el6_6.tuxcare.els3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2017-16544", "cwe": { "id": "CWE-94", "name": "Improper Control of Generation of Code ('Code Injection')" }, "notes": [ { "category": "description", "text": "In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of filenames in a directory, does not sanitize filenames and results in executing any escape sequence in the terminal. This could potentially result in code execution, arbitrary file writes, or other attacks.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Oracle-Linux-6:busybox-1:1.15.1-21.el6_6.tuxcare.els3.x86_64", "Oracle-Linux-6:busybox-petitboot-1:1.15.1-21.el6_6.tuxcare.els3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2017-16544" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html", "url": "http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/154536/VMware-Security-Advisory-2019-0013.html", "url": "http://packetstormsecurity.com/files/154536/VMware-Security-Advisory-2019-0013.html" }, { "category": "external", "summary": "http://packetstormsecurity.com/files/167552/Nexans-FTTO-GigaSwitch-Outdated-Components-Hardcoded-Backdoor.html", "url": "http://packetstormsecurity.com/files/167552/Nexans-FTTO-GigaSwitch-Outdated-Components-Hardcoded-Backdoor.html" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2019/Jun/18", "url": "http://seclists.org/fulldisclosure/2019/Jun/18" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2019/Sep/7", "url": "http://seclists.org/fulldisclosure/2019/Sep/7" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2020/Aug/20", "url": "http://seclists.org/fulldisclosure/2020/Aug/20" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2020/Mar/15", "url": "http://seclists.org/fulldisclosure/2020/Mar/15" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2020/Sep/6", "url": "http://seclists.org/fulldisclosure/2020/Sep/6" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2021/Aug/21", "url": "http://seclists.org/fulldisclosure/2021/Aug/21" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2021/Jan/39", "url": "http://seclists.org/fulldisclosure/2021/Jan/39" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2022/Jun/36", "url": "http://seclists.org/fulldisclosure/2022/Jun/36" }, { "category": "external", "summary": "http://www.vmware.com/security/advisories/VMSA-2019-0013.html", "url": "http://www.vmware.com/security/advisories/VMSA-2019-0013.html" }, { "category": "external", "summary": "https://git.busybox.net/busybox/commit/?id=c3797d40a1c57352192c6106cc0f435e7d9c11e8", "url": "https://git.busybox.net/busybox/commit/?id=c3797d40a1c57352192c6106cc0f435e7d9c11e8" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2018/07/msg00037.html", "url": "https://lists.debian.org/debian-lts-announce/2018/07/msg00037.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2021/02/msg00020.html", "url": "https://lists.debian.org/debian-lts-announce/2021/02/msg00020.html" }, { "category": "external", "summary": "https://seclists.org/bugtraq/2019/Jun/14", "url": "https://seclists.org/bugtraq/2019/Jun/14" }, { "category": "external", "summary": "https://seclists.org/bugtraq/2019/Sep/7", "url": "https://seclists.org/bugtraq/2019/Sep/7" }, { "category": "external", "summary": "https://us-cert.cisa.gov/ics/advisories/icsa-20-240-01", "url": "https://us-cert.cisa.gov/ics/advisories/icsa-20-240-01" }, { "category": "external", "summary": "https://usn.ubuntu.com/3935-1/", "url": "https://usn.ubuntu.com/3935-1/" }, { "category": "external", "summary": "https://www.twistlock.com/2017/11/20/cve-2017-16544-busybox-autocompletion-vulnerability/", "url": "https://www.twistlock.com/2017/11/20/cve-2017-16544-busybox-autocompletion-vulnerability/" } ], "release_date": "2017-11-20T15:29:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-04-23T15:54:51.440565Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1776959688", "product_ids": [ "Oracle-Linux-6:busybox-1:1.15.1-21.el6_6.tuxcare.els3.x86_64", "Oracle-Linux-6:busybox-petitboot-1:1.15.1-21.el6_6.tuxcare.els3.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1776959688" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Oracle-Linux-6:busybox-1:1.15.1-21.el6_6.tuxcare.els3.x86_64", "Oracle-Linux-6:busybox-petitboot-1:1.15.1-21.el6_6.tuxcare.els3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }