Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:2069-1

Опубликовано: 26 мая 2026
Источник: suse-cvrf

Описание

Security update for busybox

This update for busybox fixes the following issue

  • CVE-2026-29004: a crafted DHCPv6 response can lead to a heap buffer overflow in the DHCPv6 client (bsc#1263989).

Список пакетов

SUSE Linux Enterprise Server 12 SP5-LTSS
busybox-1.35.0-10.6.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
busybox-1.35.0-10.6.1

Ссылки

Описание

BusyBox before commit 42202bf contains a heap buffer overflow vulnerability in the DHCPv6 client (udhcpc6) DNS_SERVERS option handler in networking/udhcp/d6_dhcpc.c that allows network-adjacent attackers to trigger memory corruption by sending a crafted DHCPv6 response with a malformed D6_OPT_DNS_SERVERS option. Attackers can exploit incorrect heap buffer allocation calculations in the option_to_env() function to cause denial of service or achieve arbitrary code execution on embedded systems without heap hardening.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP5-LTSS:busybox-1.35.0-10.6.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:busybox-1.35.0-10.6.1
Ссылки