Security Bulletin
This security bulletin contains one medium risk vulnerability.
EUVDB-ID: #VU80391
Risk: Medium
CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-48174
CWE-ID:
CWE-787 - Out-of-bounds write
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to a boundary error when processing untrusted input ash.c. A remote attacker can send specially crafted data to the application, trigger an out-of-bounds write and execute arbitrary code on the target system.
MitigationUpdate the affected package busybox to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Server for SAP Applications 15: SP4
SUSE Linux Enterprise Server 15: SP4
SUSE Linux Enterprise Real Time 15: SP4
SUSE Linux Enterprise High Performance Computing 15: SP4
SUSE Linux Enterprise Desktop 15: SP4
Basesystem Module: 15-SP4
openSUSE Leap: 15.4 - 15.5
SUSE Manager Retail Branch Server: 4.3
SUSE Manager Server: 4.3
SUSE Manager Proxy: 4.3
busybox-warewulf3: before 1.35.0-150400.3.11.1
busybox: before 1.35.0-150400.3.11.1
busybox-testsuite: before 1.35.0-150400.3.11.1
busybox-static: before 1.35.0-150400.3.11.1
busybox-ncurses-utils: before 1.35.0-150400.4.5.1
busybox-iputils: before 1.35.0-150400.4.5.1
busybox-kbd: before 1.35.0-150400.4.5.1
busybox-gawk: before 1.35.0-150400.4.5.1
busybox-diffutils: before 1.35.0-150400.4.5.1
busybox-kmod: before 1.35.0-150400.4.5.1
busybox-tftp: before 1.35.0-150400.4.5.1
busybox-vlan: before 1.35.0-150400.4.5.1
busybox-time: before 1.35.0-150400.4.5.1
busybox-selinux-tools: before 1.35.0-150400.4.5.1
busybox-policycoreutils: before 1.35.0-150400.4.5.1
busybox-wget: before 1.35.0-150400.4.5.1
busybox-attr: before 1.35.0-150400.4.5.1
busybox-iproute2: before 1.35.0-150400.4.5.1
busybox-util-linux: before 1.35.0-150400.4.5.1
busybox-sharutils: before 1.35.0-150400.4.5.1
busybox-gzip: before 1.35.0-150400.4.5.1
busybox-grep: before 1.35.0-150400.4.5.1
busybox-bc: before 1.35.0-150400.4.5.1
busybox-coreutils: before 1.35.0-150400.4.5.1
busybox-links: before 1.35.0-150400.4.5.1
busybox-sh: before 1.35.0-150400.4.5.1
busybox-patch: before 1.35.0-150400.4.5.1
busybox-tunctl: before 1.35.0-150400.4.5.1
busybox-netcat: before 1.35.0-150400.4.5.1
busybox-bind-utils: before 1.35.0-150400.4.5.1
busybox-findutils: before 1.35.0-150400.4.5.1
busybox-man: before 1.35.0-150400.4.5.1
busybox-sysvinit-tools: before 1.35.0-150400.4.5.1
busybox-sendmail: before 1.35.0-150400.4.5.1
busybox-hostname: before 1.35.0-150400.4.5.1
busybox-dos2unix: before 1.35.0-150400.4.5.1
busybox-traceroute: before 1.35.0-150400.4.5.1
busybox-ed: before 1.35.0-150400.4.5.1
busybox-procps: before 1.35.0-150400.4.5.1
busybox-psmisc: before 1.35.0-150400.4.5.1
busybox-unzip: before 1.35.0-150400.4.5.1
busybox-syslogd: before 1.35.0-150400.4.5.1
busybox-telnet: before 1.35.0-150400.4.5.1
busybox-cpio: before 1.35.0-150400.4.5.1
busybox-tar: before 1.35.0-150400.4.5.1
busybox-bzip2: before 1.35.0-150400.4.5.1
busybox-sed: before 1.35.0-150400.4.5.1
busybox-which: before 1.35.0-150400.4.5.1
busybox-net-tools: before 1.35.0-150400.4.5.1
busybox-whois: before 1.35.0-150400.4.5.1
busybox-misc: before 1.35.0-150400.4.5.1
busybox-less: before 1.35.0-150400.4.5.1
busybox-vi: before 1.35.0-150400.4.5.1
busybox-xz: before 1.35.0-150400.4.5.1
busybox-adduser: before 1.35.0-150400.4.5.1
External linkshttp://www.suse.com/support/update/announcement/2023/suse-su-20233529-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.