Vulnetix
Try Vulnetix Request Demo
CVE-2019-5747 PUBLISHED

An issue was discovered in BusyBox through 1.30.0. An out of bounds read in udhcp components (consumed by the DHCP client, server, and/or relay) might allow a remote attacker to leak sensitive information from the stack by sending a crafted DHCP message. This is related to assurance of a 4-byte length when decoding DHCP_SUBNET. NOTE: this issue exists because of an incomplete fix for CVE-2018-20679.

EPSS 0.37% · 58.6th percentile

Risk Scores

EPSS Score
0.37%
58.6th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSbusybox0, 1:1.20.0-8.1ubuntu1, 1:1.20.0-9ubuntu1
Ubuntu:18.04:LTSbusybox1:1.27.2-2ubuntu3.1, 1:1.27.2-2ubuntu2, 1:1.27.2-2ubuntu3
Ubuntu:16.04:LTSbusybox1:1.22.0-15ubuntu1, 0

Timeline

References

Open in Interactive Console →