Debian/busybox: unknown
The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in the (1) HOST_NAME, (2) DOMAIN_NAME, (3) NIS_DOMAIN, and (4) TFTP_
Action: Upgrade busybox to 1:1.20.0-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:1.20.0-3 | - |
Fixed versions
| 1:1.20.0-3 |
Sources
published · modified · JSON