Out of Bounds Read Vulnerability in BusyBox
Summary
CVE-2018-20679: An issue was discovered in BusyBox before 1.30.0. Affects busybox across 2 version ranges.
< 1.29.3-r10
< ef800e5441185585986f9b7aaf39010a926fbd5f
Fixed in 1.29.3-r10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
BusyBox is a lightweight and versatile software suite that provides several Unix utilities in a single executable. It is commonly used in embedded systems and as a command-line interface in various Linux distributions. The vulnerability in question affects the udhcp components of BusyBox, which are responsible for DHCP server, client, and relay functionality. The vulnerability allows a remote attacker to leak sensitive information from the stack by sending a crafted DHCP message. This can lead to potential security breaches and unauthorized access to sensitive data.
Vulnerability Detail
The vulnerability, identified as CVE-2018-20679, is an out of bounds read issue in the udhcp components of BusyBox. It arises due to improper verification of 4-byte options in the udhcp_get_option() function in networking/udhcp/common.c. By exploiting this vulnerability, a remote attacker can send a specially crafted DHCP message to trigger the out of bounds read, resulting in the leakage of sensitive information from the stack. The vulnerability has a CVSS score of 7.5, indicating a high severity level.
How To Fix
Minimum fixed version
1.29.3-r10
This is the first release that contains the fix.
sudo apk add --upgrade busyboxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to update the BusyBox package to the fixed version as soon as possible to mitigate the risk of exploitation.
Conclusion
The out of bounds read vulnerability in BusyBox's udhcp components poses a significant risk to systems utilizing DHCP functionality. To mitigate this vulnerability, it is crucial to update the BusyBox package to version 1.30.0 or later. Failure to address this vulnerability may result in unauthorized access to sensitive information and potential security breaches. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for busybox →
FAQ
BusyBox is a software suite that provides several Unix utilities in a single executable. It is commonly used in embedded systems and as a command-line interface in various Linux distributions.
The udhcp component in BusyBox is responsible for DHCP server, client, and relay functionality. It allows devices to obtain IP addresses and other network configuration information automatically.
An out of bounds read vulnerability occurs when a program accesses memory outside the bounds of an allocated buffer. In this case, the udhcp components of BusyBox can read sensitive information from the stack beyond the intended boundaries, potentially leading to security breaches.
A remote attacker can exploit this vulnerability by sending a specially crafted DHCP message to the vulnerable udhcp components. This triggers the out of bounds read and allows the attacker to leak sensitive information from the stack.
The CVSS score of this vulnerability is 7.5, indicating a high severity level.
Related vulnerabilities
Recent vulnerabilities recorded for busybox.
