Integer Overflow or Wraparound Affecting busybox package, versions *


Severity

Recommended
0.0
low
0
10

Based on Red Hat Enterprise Linux security rating

    Threat Intelligence

    EPSS
    0.07% (30th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk ID SNYK-RHEL6-BUSYBOX-1368868
  • published 26 Jul 2021
  • disclosed 22 Oct 2017

How to fix?

There is no fixed version for RHEL:6 busybox.

NVD Description

Note: Versions mentioned in the description apply only to the upstream busybox package and not the busybox package as distributed by RHEL. See How to fix? for RHEL:6 relevant fixed versions and status.

archival/libarchive/decompress_unlzma.c in BusyBox 1.27.2 has an Integer Underflow that leads to a read access violation.