Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:2204-1

Опубликовано: 01 июн. 2026
Источник: suse-cvrf

Описание

Security update for busybox

This update for busybox fixes the following issue

  • CVE-2026-29004: a crafted DHCPv6 response can lead to a heap buffer overflow in the DHCPv6 client (bsc#1263989).

Список пакетов

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
busybox-1.35.0-150400.3.17.1
busybox-static-1.35.0-150400.3.17.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
busybox-1.35.0-150400.3.17.1
busybox-static-1.35.0-150400.3.17.1
SUSE Linux Enterprise Server 15 SP4-LTSS
busybox-1.35.0-150400.3.17.1
busybox-static-1.35.0-150400.3.17.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4
busybox-1.35.0-150400.3.17.1
busybox-static-1.35.0-150400.3.17.1

Ссылки

Описание

BusyBox before commit 42202bf contains a heap buffer overflow vulnerability in the DHCPv6 client (udhcpc6) DNS_SERVERS option handler in networking/udhcp/d6_dhcpc.c that allows network-adjacent attackers to trigger memory corruption by sending a crafted DHCPv6 response with a malformed D6_OPT_DNS_SERVERS option. Attackers can exploit incorrect heap buffer allocation calculations in the option_to_env() function to cause denial of service or achieve arbitrary code execution on embedded systems without heap hardening.

Затронутые продукты
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:busybox-1.35.0-150400.3.17.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:busybox-static-1.35.0-150400.3.17.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:busybox-1.35.0-150400.3.17.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:busybox-static-1.35.0-150400.3.17.1
Ссылки