Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2022-48174HistoryAug 22, 2023 - 7:16 p.m.
CVE-2022-48174
2023-08-2219:16:31
Debian Security Bug Tracker
security-tracker.debian.org
55
cve-2022-48174
busybox
internet of vehicles
arbitrary code execution
environment
unix
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
61.7%
There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | busybox | <= 1:1.35.0-4 | busybox_1:1.35.0-4_all.deb |
| Debian | 11 | all | busybox | <= 1:1.30.1-6 | busybox_1:1.30.1-6_all.deb |
| Debian | 999 | all | busybox | <= 1:1.36.1-9 | busybox_1:1.36.1-9_all.deb |
| Debian | 13 | all | busybox | <= 1:1.36.1-9 | busybox_1:1.36.1-9_all.deb |
Related
nessus
nessus
RHEL 6 : busybox (RHSA-2023:5178)
2023-09-18 00:00:00
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : busybox (SUSE-SU-2023:3820-1)
2023-09-28 00:00:00
Amazon Linux AMI : busybox (ALAS-2023-1832)
2023-09-25 00:00:00
osv
osv
CVE-2022-48174
2023-08-22 19:16:31
busybox-1.36.1-2.1 on GA media
2024-06-15 00:00:00
busybox vulnerabilities
2023-09-04 11:50:38
cvelist
cvelist
CVE-2022-48174
2023-08-22 00:00:00
nvd
nvd
CVE-2022-48174
2023-08-22 19:16:31
alpinelinux
alpinelinux
CVE-2022-48174
2023-08-22 19:16:31
ubuntucve
ubuntucve
CVE-2022-48174
2023-08-22 00:00:00
redhatcve
redhatcve
CVE-2022-48174
2023-09-06 06:35:38
redhat
redhat
(RHSA-2023:5178) Important: busybox security update
2023-09-18 07:21:58
openvas
openvas
Huawei EulerOS: Security Advisory for busybox (EulerOS-SA-2023-2892)
2023-10-09 00:00:00
openSUSE: Security Advisory for busybox (SUSE-SU-2023:3529-1)
2024-03-04 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:3819-1)
2023-09-28 00:00:00
cve
cve
CVE-2022-48174
2023-08-22 19:16:31
f5
f5
K000140863: Busybox vulnerability CVE-2022-48174
2024-08-27 00:00:00
oraclelinux
oraclelinux
busybox security and bug fix update
2023-10-13 00:00:00
cloudlinux
cloudlinux
busybox: Fix of CVE-2022-48174
2023-09-05 09:26:59
prion
prion
Stack overflow
2023-08-22 19:16:00
amazon
amazon
Medium: busybox
2023-09-13 23:15:00
ubuntu
ubuntu
BusyBox vulnerabilities
2023-09-04 00:00:00
BusyBox vulnerabilities
2024-08-14 00:00:00
qualysblog
qualysblog
Oracle Patch Update, January 2024 Security Update Review
2024-01-17 15:29:33
Oracle Critical Patch Update, July 2024 Security Update Review
2024-07-17 14:34:50
oracle
oracle
Oracle Critical Patch Update Advisory - July 2024
2024-07-16 00:00:00
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
61.7%
Related for DEBIANCVE:CVE-2022-48174