CVE-2022-48174

Katalog CVE

CVSS 9.8 · Critical EPSS 3,2%

Kerentanan Out-of-bounds Write pada debian linux, busybox. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.

Rincian

Terbit di NVD

22 Agustus 2023

Terakhir diubah

14 Juli 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

3,2% peluang dieksploitasi; lebih tinggi dari 87,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugs.busybox.net/show_bug.cgi?id=15216 issue tracking · advisory vendor
• https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20241129-0001/ advisory pihak ketiga
• https://cert-portal.siemens.com/productcert/html/ssa-089022.html
• https://cert-portal.siemens.com/productcert/html/ssa-585531.html