CVE-2011-2716
The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary...
The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in the (1) HOST_NAME, (2) DOMAIN_NAME, (3) NIS_DOMAIN, and (4) TFTP_SERVER_NAME host name options.
Exploit likelihood
What each source reports
NVD Score used
The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in the (1) HOST_NAME, (2) DOMAIN_NAME, (3) NIS_DOMAIN, and (4) TFTP_SERVER_NAME host name options.
- Record
CVE-2011-2716- CVSS 2.0
- 6.8 Medium
AV:A/AC:H/Au:N/C:C/I:C/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in the (1) HOST_NAME, (2) DOMAIN_NAME, (3) NIS_DOMAIN, and (4) TFTP_SERVER_NAME host name options.
- Record
CVE-2011-2716- Updated
- 2026-11-02
EUVDEUVD-2011-2695 No score
The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in the (1) HOST_NAME, (2) DOMAIN_NAME, (3) NIS_DOMAIN, and (4) TFTP_SERVER_NAME host name options.
- Record
EUVD-2011-2695- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4fjg-vv5f-pmrp No score
The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary...
The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in the (1) HOST_NAME, (2) DOMAIN_NAME, (3) NIS_DOMAIN, and (4) TFTP_SERVER_NAME host name options.
- Record
GHSA-4fjg-vv5f-pmrp- Weakness
- CWE-20
- Updated
- 2026-11-02
OSV No score
The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in the (1) HOST_NAME, (2) DOMAIN_NAME, (3) NIS_DOMAIN, and (4) TFTP_SERVER_NAME host name options.
- Record
CVE-2011-2716- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-2716 No score
The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in the (1) HOST_NAME, (2) DOMAIN_NAME, (3) NIS_DOMAIN, and (4) TFTP_SERVER_NAME host name options.
- Record
DEBIAN-CVE-2011-2716- Updated
- 2026-11-02
OSVUBUNTU-CVE-2011-2716 No score
The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in the (1) HOST_NAME, (2) DOMAIN_NAME, (3) NIS_DOMAIN, and (4) TFTP_SERVER_NAME host name options.
- Record
UBUNTU-CVE-2011-2716- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
busyboxDebian:12 |
before 1:1.20.0-3 | 1:1.20.0-3 |
busyboxDebian:13 |
before 1:1.20.0-3 | 1:1.20.0-3 |
busyboxDebian:14 |
before 1:1.20.0-3 | 1:1.20.0-3 |
busyboxRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 1:1.2.0-13.el5 | 1:1.2.0-13.el5 |
busybox-anacondaRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 1:1.2.0-13.el5 | 1:1.2.0-13.el5 |
busyboxRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 1:1.2.0-13.el5 | 1:1.2.0-13.el5 |
busybox-anacondaRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 1:1.2.0-13.el5 | 1:1.2.0-13.el5 |
busyboxRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 1:1.15.1-15.el6 | 1:1.15.1-15.el6 |
busybox-petitbootRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 1:1.15.1-15.el6 | 1:1.15.1-15.el6 |
busyboxRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 1:1.15.1-15.el6 | 1:1.15.1-15.el6 |
Show 5 moreShow less
| Package | Affected | Fixed |
|---|---|---|
busybox-petitbootRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 1:1.15.1-15.el6 | 1:1.15.1-15.el6 |
busyboxRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 1:1.15.1-15.el6 | 1:1.15.1-15.el6 |
busybox-petitbootRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 1:1.15.1-15.el6 | 1:1.15.1-15.el6 |
busyboxRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 1:1.15.1-15.el6 | 1:1.15.1-15.el6 |
busybox-petitbootRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 1:1.15.1-15.el6 | 1:1.15.1-15.el6 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-2716 is a medium vulnerability (CVSS 6.8) in Busybox, published July 3, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.80%, the 78th percentile. Fixed in busybox 1:1.20.0-3.
References
downloads.avaya.com/css/P8/documents/100158840
busybox.net/news.html
secunia.com/advisories/45363
support.t-mobile.com/docs/DOC-21994
bugs.busybox.net/show_bug.cgi?id=3979
rhn.redhat.com/errata/RHSA-2012-0810.html
Show 26 moreShow less
securityfocus.com/bid/48879
mandriva.com/security/advisories?name=MDVSA-2012:129
seclists.org/fulldisclosure/2019/Jun/18
packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html
nvd.nist.gov/vuln/detail/CVE-2011-2716
github.com/advisories/GHSA-4fjg-vv5f-pmrp
security-tracker.debian.org/tracker/CVE-2011-2716
access.redhat.com/errata/RHSA-2012:0308
bugzilla.redhat.com/show_bug.cgi?id=201919
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0308.json
cve.org/CVERecord?id=CVE-2006-1168
ubuntu.com/security/CVE-2011-2716
openwall.com/lists/oss-security/2011/07/25/3