| Package | Affected versions | Patched versions |
|---|---|---|
| busybox | = 0.60.5= 1.0.0= 1.00= 1.01= 1.1.0= 1.1.1= 1.1.2= 1.1.3= 1.10.0= 1.10.1= 1.10.2= 1.10.3= 1.10.4= 1.11.0= 1.11.1= 1.11.2= 1.11.3= 1.12.0= 1.12.1= 1.12.2= 1.12.3= 1.12.4= 1.13.0= 1.13.1= 1.13.2= 1.13.3= 1.13.4= 1.14.0= 1.14.1= 1.14.2= 1.14.3= 1.14.4= 1.15.0= 1.15.1= 1.15.2= 1.15.3= 1.16.0= 1.16.1= 1.16.2= 1.17.0= 1.17.1= 1.17.2= 1.17.3= 1.17.4= 1.18.0= 1.18.1= 1.18.2= 1.18.3= 1.18.4= 1.18.5= 1.19.0= 1.19.2= 1.19.3= 1.2.0= 1.2.1= 1.2.2= 1.2.2.1= 1.3.0= 1.3.1= 1.3.2= 1.4.0= 1.4.1= 1.4.2= 1.5.0= 1.5.1= 1.6.0= 1.6.1= 1.7.0= 1.7.1= 1.7.2= 1.7.3= 1.8.0= 1.8.1= 1.8.2= 1.9.0= 1.9.1= 1.9.2≤ 1.19.4 |
The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in the (1) HOST_NAME, (2) DOMAIN_NAME, (3) NIS_DOMAIN, and (4) TFTP_SERVER_NAME host name options.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free