Improper Certificate Validation in BusyBox - CVE-2018-1000500
Published: June 26, 2018 / Updated: August 8, 2020
Vulnerability identifier: #VU37004
CSH Severity: High
CVSS v4: 9.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-1000500
CWE-ID: CWE-295
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.
Busybox contains a Missing SSL certificate validation vulnerability in The "busybox wget" applet that can result in arbitrary code execution. This attack appear to be exploitable via Simply download any file over HTTPS using "busybox wget https://compromised-domain.com/important-file".
Affected software
BusyBox
busybox (Alpine package)
busybox-static
busybox
busybox-static (Ubuntu package)
busybox-initramfs (Ubuntu package)
busybox (Ubuntu package)
busybox-warewulf3
busybox-testsuite
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Enterprise Storage
SUSE OpenStack Cloud
SUSE OpenStack Cloud Crowbar
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Realtime Extension
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Server for SAP Applications
openSUSE Leap
Ubuntu
busybox (Alpine package)
busybox-static
busybox
busybox-static (Ubuntu package)
busybox-initramfs (Ubuntu package)
busybox (Ubuntu package)
busybox-warewulf3
busybox-testsuite
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Enterprise Storage
SUSE OpenStack Cloud
SUSE OpenStack Cloud Crowbar
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Realtime Extension
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Server for SAP Applications
openSUSE Leap
Ubuntu
How to mitigate CVE-2018-1000500
Install update from vendor's website.
BusyBox - update to 1.32.0
busybox-static - addressed in versions 1.26.2-4.5.1, 1.34.1-4.9.1, 1.35.0-150400.3.3.1
busybox - addressed in versions 1.26.2-4.5.1, 1.34.1-4.9.1, 1.35.0-4.3.1, 1.35.0-150400.3.3.1
busybox-static (Ubuntu package) - addressed in versions 1:1.27.2-2ubuntu3.3, 1:1.30.1-4ubuntu6.2
busybox-initramfs (Ubuntu package) - addressed in versions 1:1.27.2-2ubuntu3.3, 1:1.30.1-4ubuntu6.2
busybox (Ubuntu package) - addressed in versions 1:1.27.2-2ubuntu3.3, 1:1.30.1-4ubuntu6.2
busybox-warewulf3 - update to 1.35.0-150400.3.3.1
busybox-testsuite - update to 1.35.0-150400.3.3.1
busybox-static - addressed in versions 1.26.2-4.5.1, 1.34.1-4.9.1, 1.35.0-150400.3.3.1
busybox - addressed in versions 1.26.2-4.5.1, 1.34.1-4.9.1, 1.35.0-4.3.1, 1.35.0-150400.3.3.1
busybox-static (Ubuntu package) - addressed in versions 1:1.27.2-2ubuntu3.3, 1:1.30.1-4ubuntu6.2
busybox-initramfs (Ubuntu package) - addressed in versions 1:1.27.2-2ubuntu3.3, 1:1.30.1-4ubuntu6.2
busybox (Ubuntu package) - addressed in versions 1:1.27.2-2ubuntu3.3, 1:1.30.1-4ubuntu6.2
busybox-warewulf3 - update to 1.35.0-150400.3.3.1
busybox-testsuite - update to 1.35.0-150400.3.3.1