Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:2053-1

Опубликовано: 25 мая 2026
Источник: suse-cvrf

Описание

Security update for busybox

This update for busybox fixes the following issue

  • CVE-2026-29004: Heap buffer overflow vulnerability in the DHCPv6 client (udhcpc6) DNS_SERVERS option handler in networking/udhcp/d6_dhcpc.c (bsc#1263989).

Список пакетов

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
busybox-1.37.0-150500.10.20.1
busybox-static-1.37.0-150500.10.20.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
busybox-1.37.0-150500.10.20.1
busybox-static-1.37.0-150500.10.20.1
SUSE Linux Enterprise Server 15 SP5-LTSS
busybox-1.37.0-150500.10.20.1
busybox-static-1.37.0-150500.10.20.1
SUSE Linux Enterprise Server 15 SP6-LTSS
busybox-1.37.0-150500.10.20.1
busybox-static-1.37.0-150500.10.20.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5
busybox-1.37.0-150500.10.20.1
busybox-static-1.37.0-150500.10.20.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6
busybox-1.37.0-150500.10.20.1
busybox-static-1.37.0-150500.10.20.1

Ссылки

Описание

BusyBox before commit 42202bf contains a heap buffer overflow vulnerability in the DHCPv6 client (udhcpc6) DNS_SERVERS option handler in networking/udhcp/d6_dhcpc.c that allows network-adjacent attackers to trigger memory corruption by sending a crafted DHCPv6 response with a malformed D6_OPT_DNS_SERVERS option. Attackers can exploit incorrect heap buffer allocation calculations in the option_to_env() function to cause denial of service or achieve arbitrary code execution on embedded systems without heap hardening.

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:busybox-1.37.0-150500.10.20.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:busybox-static-1.37.0-150500.10.20.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:busybox-1.37.0-150500.10.20.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:busybox-static-1.37.0-150500.10.20.1
Ссылки