UBUNTU-CVE-2022-48174

Details

There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.

Affected Packages

busybox

Ubuntu 20.04 LTS

Fixed in:

1:1.30.1-4ubuntu6.5

busybox

Ubuntu 22.04 LTS

Fixed in:

1:1.30.1-7ubuntu3.1

busybox

Ubuntu 24.04 LTS

Fixed in:

1:1.36.1-6ubuntu3.1

busybox

Ubuntu Pro 14.04 LTS

Fixed in:

1:1.21.0-1ubuntu1.4+esm1

busybox

Ubuntu Pro 16.04 LTS

Fixed in:

1:1.22.0-15ubuntu1.4+esm2

busybox

Ubuntu Pro 18.04 LTS

Fixed in:

1:1.27.2-2ubuntu3.4+esm1

References

REPORT

https://ubuntu.com/security/CVE-2022-48174

ADVISORY

https://ubuntu.com/security/notices/USN-6335-1

ADVISORY

https://ubuntu.com/security/notices/USN-6961-1

REPORT

https://www.cve.org/CVERecord?id=CVE-2022-48174