BusyBox up to 1.35.0 netstat privilege escalation

Summaryinfo

A vulnerability classified as critical was found in BusyBox up to 1.35.0. The affected element is an unknown function of the component netstat Handler. Executing a manipulation can lead to an unknown weakness. This vulnerability appears as CVE-2022-28391. The attack may be performed from remote. There is no available exploit. A patch should be applied to remediate this issue.

Detailsinfo

A vulnerability was found in BusyBox up to 1.35.0. It has been declared as critical. This vulnerability affects an unknown function of the component netstat Handler. As an impact it is known to affect confidentiality, integrity, and availability.

The weakness was presented 04/04/2022 as 13661. The advisory is available at gitlab.alpinelinux.org. This vulnerability was named CVE-2022-28391 since 04/03/2022. The technical details are unknown and an exploit is not available.

Applying a patch is able to eliminate this problem. The bugfix is ready for download at git.alpinelinux.org.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Name

• BusyBox

Version

• 1.0
• 1.1
• 1.2
• 1.3
• 1.4
• 1.5
• 1.6
• 1.7
• 1.8
• 1.9
• 1.10
• 1.11
• 1.12
• 1.13
• 1.14
• 1.15
• 1.16
• 1.17
• 1.18
• 1.19
• 1.20
• 1.21
• 1.22
• 1.23
• 1.24
• 1.25
• 1.26
• 1.27
• 1.28
• 1.29
• 1.30
• 1.31
• 1.32
• 1.33
• 1.34
• 1.35.0

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion