The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5179-2 advisory.

    USN-5179-1 fixed vulnerabilities in BusyBox. This update provides the corresponding updates for Ubuntu     16.04 ESM.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1408-1 advisory.

  - Directory traversal vulnerability in the BusyBox implementation of tar before 1.22.0 v5 allows remote     attackers to point to files outside the current working directory via a symlink. (CVE-2011-5325)

  - Busybox contains a Missing SSL certificate validation vulnerability in The busybox wget applet that can     result in arbitrary code execution. This attack appear to be exploitable via Simply download any file over     HTTPS using busybox wget https://compromised-domain.com/important-file. (CVE-2018-1000500)

  - BusyBox project BusyBox wget version prior to commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e contains a     Buffer Overflow vulnerability in Busybox wget that can result in heap buffer overflow. This attack appear     to be exploitable via network connectivity. This vulnerability appears to have been fixed in after commit     8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e. (CVE-2018-1000517)

  - An issue was discovered in BusyBox before 1.30.0. An out of bounds read in udhcp components (consumed by     the DHCP server, client, and relay) allows a remote attacker to leak sensitive information from the stack     by sending a crafted DHCP message. This is related to verification in udhcp_get_option() in     networking/udhcp/common.c that 4-byte options are indeed 4 bytes. (CVE-2018-20679)

  - decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer,     with a resultant invalid free or segmentation fault, via malformed gzip data. (CVE-2021-28831)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer,     with a resultant invalid free or segmentation fault, via malformed gzip data. (CVE-2021-28831)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The gunzip decompressor of Busybox, tiny utilities for small and embedded systems, mishandled the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data. 

For Debian 9 stretch, this problem has been fixed in version 1:1.22.0-19+deb9u2.

We recommend that you upgrade your busybox packages.

For the detailed security status of busybox please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/busybox

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4019 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4019-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                         Tobias Frost     January 19, 2025                              https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : busybox     Version        : 1:1.30.1-6+deb11u1     CVE ID         : CVE-2021-28831 CVE-2021-42374 CVE-2021-42378 CVE-2021-42379                      CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42384                      CVE-2021-42385 CVE-2021-42386 CVE-2022-48174 CVE-2023-42364                      CVE-2023-42365     Debian Bug     : 985674 999567 1059049 1059051 1059052

    Multiple vulnerabilities have been found in BusyBox, a lightweight     single-executable containing various Unix utilities, which potentially     allow attackers to cause denial of service, information leakage, or     arbitrary code execution through malformed gzip data, crafted LZMA     input or crafted awk patterns.

    CVE-2021-28831

        decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit         on the huft_build result pointer, with a resultant invalid free or         segmentation fault, via malformed gzip data.

    CVE-2021-42374

        An out-of-bounds heap read in Busybox's unlzma applet leads to         information leak and denial of service when crafted LZMA-compressed         input is decompressed. This can be triggered by any applet/format that

    CVE-2021-42378

        A use-after-free in Busybox's awk applet leads to denial of service and         possibly code execution when processing a crafted awk pattern in the         getvar_i function

    CVE-2021-42379

        A use-after-free in Busybox's awk applet leads to denial of service and         possibly code execution when processing a crafted awk pattern in the         next_input_file function

    CVE-2021-42380

        A use-after-free in Busybox's awk applet leads to denial of service and         possibly code execution when processing a crafted awk pattern in the         clrvar function

    CVE-2021-42381

        A use-after-free in Busybox's awk applet leads to denial of service and         possibly code execution when processing a crafted awk pattern in the         hash_init function

    CVE-2021-42382

        use-after-free in Busybox's awk applet leads to denial of service and         possibly code execution when processing a crafted awk pattern in the         getvar_s function

    CVE-2021-42384

        A use-after-free in Busybox's awk applet leads to denial of service and         possibly code execution when processing a crafted awk pattern in the         handle_special function

    CVE-2021-42385

        A use-after-free in Busybox's awk applet leads to denial of service and         possibly code execution when processing a crafted awk pattern in the         evaluate function

    CVE-2021-42386

        A use-after-free in Busybox's awk applet leads to denial of service and         possibly code execution when processing a crafted awk pattern in the         nvalloc function

    CVE-2022-48174

        There is a stack overflow vulnerability in ash.c:6030 in busybox before         1.35. In the environment of Internet of Vehicles, this vulnerability can         be executed from command to arbitrary code execution.

    CVE-2023-42364

        A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to         cause a denial of service via a crafted awk pattern in the awk.c         evaluate function.

    CVE-2023-42365

        A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a         crafted awk pattern in the awk.c copyvar function.

    For Debian 11 bullseye, these problems have been fixed in version     1:1.30.1-6+deb11u1.

    We recommend that you upgrade your busybox packages.

    For the detailed security status of busybox please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/busybox

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3959-1 advisory.

    - Enable switch_root       With this change virtme --force-initramfs works as expected.
    - Enable udhcpc

    busybox was updated to 1.35.0

    - Adjust busybox.config for new features in find, date and cpio

    - Annotate CVEs already fixed in upstream, but not mentioned in .changes yet:

    * CVE-2017-16544 (bsc#1069412): Insufficient sanitization of filenames when autocompleting
    * CVE-2015-9261 (bsc#1102912): huft_build misuses a pointer, causing segfaults
    * CVE-2016-2147 (bsc#970663): out of bounds write (heap) due to integer underflow in udhcpc
    * CVE-2016-2148 (bsc#970662): heap-based buffer overflow in OPTION_6RD parsing
    * CVE-2016-6301 (bsc#991940): NTP server denial of service flaw
    * CVE-2017-15873 (bsc#1064976): The get_next_block function in archival/libarchive/decompress_bunzip2.c     has an Integer Overflow
    * CVE-2017-15874 (bsc#1064978): archival/libarchive/decompress_unlzma.c has an Integer Underflow
    * CVE-2019-5747 (bsc#1121428): out of bounds read in udhcp components
    * CVE-2021-42373, CVE-2021-42374, CVE-2021-42375, CVE-2021-42376,       CVE-2021-42377, CVE-2021-42378, CVE-2021-42379, CVE-2021-42380,       CVE-2021-42381, CVE-2021-42382, CVE-2021-42383, CVE-2021-42384,       CVE-2021-42385, CVE-2021-42386 (bsc#1192869) : v1.34.0 bugfixes
    * CVE-2021-28831 (bsc#1184522): invalid free or segmentation fault via malformed gzip data
    * CVE-2018-20679 (bsc#1121426): out of bounds read in udhcp
    * CVE-2018-1000517 (bsc#1099260):  Heap-based buffer overflow in the retrieve_file_data()
    * CVE-2011-5325 (bsc#951562): tar directory traversal
    * CVE-2018-1000500 (bsc#1099263):  wget: Missing SSL certificate validation

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-d20c8a4730 advisory.

  - decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer,     with a resultant invalid free or segmentation fault, via malformed gzip data. (CVE-2021-28831)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-2024803354 advisory.

  - decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer,     with a resultant invalid free or segmentation fault, via malformed gzip data. (CVE-2021-28831)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of busybox installed on the remote host is prior to 1.19.3-2.12. It is, therefore, affected by a vulnerability as referenced in the ALAS-2021-1496 advisory.

    decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer,     with a resultant invalid free or segmentation fault, via malformed gzip data. (CVE-2021-28831)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6335-1 advisory.

    It was discovered that BusyBox incorrectly handled certain malformed gzip archives. If a user or automated     system were tricked into processing a specially crafted gzip archive, a remote attacker could use this     issue to cause BusyBox to crash, resulting in a denial of service, or execute arbitrary code. This issue     only affected Ubuntu 14.04 LTS. (CVE-2021-28831)

    It was discovered that BusyBox did not properly validate user input when performing certain arithmetic     operations. If a user or automated system were tricked into processing a specially crafted file, an     attacker could possibly use this issue to cause BusyBox to crash, resulting in a denial of service, or     execute arbitrary code. (CVE-2022-48174)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
160896	Ubuntu 16.04 ESM : BusyBox vulnerability (USN-5179-2)	Nessus	Ubuntu Local Security Checks	2022/5/10	2024/10/29	critical
154766	openSUSE 15 Security Update : busybox (openSUSE-SU-2021:1408-1)	Nessus	SuSE Local Security Checks	2021/11/1	2022/1/20	critical
153733	EulerOS 2.0 SP9 : busybox (EulerOS-SA-2021-2546)	Nessus	Huawei Local Security Checks	2021/9/27	2021/9/27	high
148302	Debian DLA-2614-1 : busybox security update	Nessus	Debian Local Security Checks	2021/4/2	2024/1/12	high
214387	Debian dla-4019 : busybox - security update	Nessus	Debian Local Security Checks	2025/1/19	2025/1/19	critical
167330	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : busybox (SUSE-SU-2022:3959-1)	Nessus	SuSE Local Security Checks	2022/11/13	2026/6/26	critical
148253	Fedora 33 : 1:busybox (2021-d20c8a4730)	Nessus	Fedora Local Security Checks	2021/3/31	2022/1/21	high
148788	Fedora 32 : 1:busybox (2021-2024803354)	Nessus	Fedora Local Security Checks	2021/4/19	2021/4/19	high
149431	Amazon Linux AMI : busybox (ALAS-2021-1496)	Nessus	Amazon Linux Local Security Checks	2021/5/12	2024/12/11	critical
180472	Ubuntu 16.04 ESM / 18.04 ESM : BusyBox vulnerabilities (USN-6335-1)	Nessus	Ubuntu Local Security Checks	2023/9/4	2025/9/3	critical

检测

插件搜索

critical

critical

high

high

critical

critical

high

high

critical

critical