Wind River Support Network

HomeDefectsLIN1021-6390
Fixed

LIN1021-6390 : Security Advisory - busybox - CVE-2022-48174

Created: Aug 22, 2023    Updated: Sep 4, 2023
Resolved Date: Sep 4, 2023
Found In Version: 10.21.20.1
Severity: Standard
Applicable for: Wind River Linux LTS 21
Component/s: Userspace

Description

There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.


CREATE(Triage):(User=admin) CVE-2022-48174 (https://nvd.nist.gov/vuln/detail/CVE-2022-48174)

CVEs


Live chat
Online