Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2017-15874

Опубликовано: 24 окт. 2017
Источник: debian
EPSS Низкий

Описание

archival/libarchive/decompress_unlzma.c in BusyBox 1.27.2 has an Integer Underflow that leads to a read access violation.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
busyboxfixed1:1.27.2-2package
busyboxnot-affectedstretchpackage
busyboxnot-affectedjessiepackage
busyboxnot-affectedwheezypackage

Примечания

  • https://bugs.busybox.net/show_bug.cgi?id=10436

  • Introduced in: https://git.busybox.net/busybox/commit/?id=3989e5adf454a3ab98412b249c2c9bd2a3175ae0

  • Fixed by: https://git.busybox.net/busybox/commit/?id=9ac42c500586fa5f10a1f6d22c3f797df11b1f6b

EPSS

Процентиль: 51%
0.0028
Низкий

Связанные уязвимости

CVSS3: 5
ubuntu
больше 8 лет назад

archival/libarchive/decompress_unlzma.c in BusyBox 1.27.2 has an Integer Underflow that leads to a read access violation.

CVSS3: 3.3
redhat
больше 8 лет назад

archival/libarchive/decompress_unlzma.c in BusyBox 1.27.2 has an Integer Underflow that leads to a read access violation.

CVSS3: 5
nvd
больше 8 лет назад

archival/libarchive/decompress_unlzma.c in BusyBox 1.27.2 has an Integer Underflow that leads to a read access violation.

CVSS3: 5.5
github
больше 3 лет назад

archival/libarchive/decompress_unlzma.c in BusyBox 1.27.2 has an Integer Underflow that leads to a read access violation.

suse-cvrf
около 4 лет назад

Security update for busybox

EPSS

Процентиль: 51%
0.0028
Низкий