CVE-2016-2148 in BusyBox

Summary

Heap-based buffer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to have unspecified impact via vectors involving OPTION_6RD parsing.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 01/29/2016
• Disclosure: 02/09/2017
• Moderation: VulDB entry created
• Entries: 1: VDB-96756
• CPE: ready
• CWE: CWE-119 (Confirmed)
• CVSS: 8.5
• EPSS: 0.15842
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-2148
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-2148
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-2148/