Alpine/busybox: high 7.5
An issue was discovered in BusyBox before 1.30.0. An out of bounds read in udhcp components (consumed by the DHCP server, client, and relay) allows a remote attacker to leak sensitive information from
Action: Upgrade busybox to 1.29.3-r10 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.29.3-r10 | - |
Fixed versions
| 1.29.3-r10 |
Sources
- osv: ALPINE-CVE-2018-20679#Alpine:v3.23/busybox
- https://security.alpinelinux.org/vuln/CVE-2018-20679
published · modified · JSON