{"id":"CVE-2022-48174","aliases":["ALPINE-CVE-2022-48174","AZL-56490","AZL-64326","BELL-CVE-2022-48174","CLSA-2023-1693904834","CLSA-2023-1693904973","CLSA-2023-1693905084","CLSA-2023-1693906015","CLSA-2025-1760982550","DEBIAN-CVE-2022-48174","DLA-4019-1","EUVD-2022-50885","GHSA-w9cc-xrp8-ffx4","OESA-2023-1583","RHSA-2023:5178","ROOT-OS-ALPINE-315-CVE-2022-48174","ROOT-OS-ALPINE-317-CVE-2022-48174","SUSE-SU-2023:3529-1","SUSE-SU-2023:3729-1","SUSE-SU-2023:3819-1","SUSE-SU-2023:3820-1","UBUNTU-CVE-2022-48174","USN-6335-1","USN-6961-1","openSUSE-SU-2024:13181-1"],"status":"published","title":"There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment...","description":"There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.03158,"percentile":0.88063,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2023-08-22T00:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Alpine:v3.18","package":"busybox","fixed_in":["1.36.1-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"busybox","fixed_in":["1.36.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"busybox","fixed_in":["1.36.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"busybox","fixed_in":["1.36.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"busybox","fixed_in":["1.36.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"busybox","fixed_in":["1.36.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"busybox","fixed_in":["1.36.1-r2"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"busybox","fixed_in":["1.35.0-13"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"busybox","fixed_in":["1.36.1-14"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"busybox","fixed_in":["1.35.0-r34"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"busybox","fixed_in":["1.36.1-r4"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"busybox","fixed_in":["1.35.0-r34"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"busybox","fixed_in":["1.36.1-r4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"busybox","fixed_in":["1:1.27.2-2ubuntu3.4+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"busybox-initramfs","fixed_in":["1:1.27.2-2ubuntu3.4+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"busybox-static","fixed_in":["1:1.27.2-2ubuntu3.4+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"busybox-syslogd","fixed_in":["1:1.27.2-2ubuntu3.4+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"udhcpc","fixed_in":["1:1.27.2-2ubuntu3.4+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"udhcpd","fixed_in":["1:1.27.2-2ubuntu3.4+tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"busybox","fixed_in":["2:1.22.0-15ubuntu1.4+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"busybox-initramfs","fixed_in":["2:1.22.0-15ubuntu1.4+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"busybox-static","fixed_in":["2:1.22.0-15ubuntu1.4+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"busybox-syslogd","fixed_in":["2:1.22.0-15ubuntu1.4+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"udhcpc","fixed_in":["2:1.22.0-15ubuntu1.4+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"udhcpd","fixed_in":["2:1.22.0-15ubuntu1.4+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"busybox","fixed_in":["1:1.15.1-21.el6_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"busybox-petitboot","fixed_in":["1:1.15.1-21.el6_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"busybox","fixed_in":["1:1.15.1-21.el6_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"busybox-petitboot","fixed_in":["1:1.15.1-21.el6_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"busybox","fixed_in":["1:1.30.1-4+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"busybox-static","fixed_in":["1:1.30.1-4+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"busybox-syslogd","fixed_in":["1:1.30.1-4+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"udhcpc","fixed_in":["1:1.30.1-4+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"udhcpd","fixed_in":["1:1.30.1-4+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"busybox","fixed_in":["1:1.35.0-4+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"busybox","fixed_in":["1:1.37.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"busybox","fixed_in":["1:1.37.0-1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"busybox","fixed_in":["1.31.1-19.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"busybox","fixed_in":["1.31.1-19.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"busybox","fixed_in":["1.34.1-19.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"busybox","fixed_in":["1.34.1-19.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"busybox","fixed_in":["1.34.1-19.oe2203sp2"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:6","package":"busybox","fixed_in":["1:1.15.1-21.el6_10.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:6","package":"busybox-petitboot","fixed_in":["1:1.15.1-21.el6_10.1"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.15","package":"busybox","fixed_in":["1.34.1-r70071","1.34.1-r70072"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.15","package":"rootio-busybox","fixed_in":["1.34.1-r70071","1.34.1-r70072"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.17","package":"busybox","fixed_in":["1.35.0-r310071","1.35.0-r310072"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.17","package":"rootio-busybox","fixed_in":["1.35.0-r310071","1.35.0-r310072"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"busybox","fixed_in":["1.35.0-150400.3.11.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"busybox","fixed_in":["1.35.0-150400.3.11.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"busybox-links","fixed_in":["1.35.0-150400.4.5.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"busybox-links","fixed_in":["1.35.0-150400.4.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"busybox","fixed_in":["1.35.0-4.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"busybox","fixed_in":["1.35.0-4.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"busybox","fixed_in":["1.35.0-150000.4.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"busybox","fixed_in":["1.35.0-150000.4.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"busybox","fixed_in":["1.35.0-150000.4.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"busybox","fixed_in":["1.35.0-150000.4.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"busybox","fixed_in":["1.35.0-150000.4.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"busybox","fixed_in":["1.35.0-150000.4.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"busybox","fixed_in":["1.35.0-150000.4.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"busybox","fixed_in":["1.35.0-150000.4.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"busybox","fixed_in":["1.35.0-150000.4.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"busybox","fixed_in":["1.35.0-150000.4.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.2","package":"busybox","fixed_in":["1.35.0-150000.4.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.2","package":"busybox","fixed_in":["1.35.0-150000.4.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"busybox","fixed_in":["1.35.0-150000.4.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"busybox","fixed_in":["1.35.0-150000.4.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"busybox","fixed_in":["1.35.0-150500.10.3.3"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"busybox","fixed_in":["1.35.0-150500.10.3.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"busybox","fixed_in":["1:1.21.0-1ubuntu1.4+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"busybox","fixed_in":["1:1.22.0-15ubuntu1.4+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"busybox","fixed_in":["1:1.27.2-2ubuntu3.4+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"busybox","fixed_in":["1:1.30.1-4ubuntu6.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"busybox","fixed_in":["1:1.30.1-7ubuntu3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"busybox","fixed_in":["1:1.36.1-6ubuntu3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"busybox","fixed_in":["1.36.1-2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.18","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36.1-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36.1-r2"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-13"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36.1-14"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.35.0-r29"},{"fixed":"1.35.0-r34"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.36.1-r1"},{"fixed":"1.36.1-r4"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.35.0-r29"},{"fixed":"1.35.0-r34"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.36.1-r1"},{"fixed":"1.36.1-r4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.27.2-2ubuntu3.4+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"busybox-initramfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.27.2-2ubuntu3.4+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"busybox-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.27.2-2ubuntu3.4+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"busybox-syslogd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.27.2-2ubuntu3.4+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"udhcpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.27.2-2ubuntu3.4+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"udhcpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.27.2-2ubuntu3.4+tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.22.0-15ubuntu1.4+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"busybox-initramfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.22.0-15ubuntu1.4+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"busybox-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.22.0-15ubuntu1.4+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"busybox-syslogd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.22.0-15ubuntu1.4+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"udhcpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.22.0-15ubuntu1.4+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"udhcpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.22.0-15ubuntu1.4+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.15.1-21.el6_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"busybox-petitboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.15.1-21.el6_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.15.1-21.el6_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"busybox-petitboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.15.1-21.el6_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.30.1-4+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"busybox-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.30.1-4+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"busybox-syslogd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.30.1-4+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"udhcpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.30.1-4+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"udhcpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.30.1-4+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.35.0-4+deb12u1"}]}],"versions":["1:1.35.0-4"]},{"source":"osv","ecosystem":"Debian:13","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.37.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.37.0-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.30.1-6+deb11u1"}]}],"versions":["1:1.30.1-6"],"bundled":13},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.31.1-19.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.31.1-19.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.34.1-19.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.34.1-19.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.34.1-19.oe2203sp2"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.15.1-21.el6_10.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"busybox-petitboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.15.1-21.el6_10.1"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.15","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.34.1-r70071"},{"fixed":"1.34.1-r70072"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.15","package":"rootio-busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.34.1-r70071"},{"fixed":"1.34.1-r70072"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.17","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-r310071"},{"fixed":"1.35.0-r310072"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.17","package":"rootio-busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-r310071"},{"fixed":"1.35.0-r310072"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150400.3.11.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150400.3.11.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"busybox-links","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150400.4.5.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"busybox-links","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150400.4.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-4.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-4.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150000.4.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150000.4.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150000.4.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150000.4.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150000.4.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150000.4.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150000.4.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150000.4.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150000.4.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150000.4.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150000.4.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150000.4.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150000.4.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150000.4.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150500.10.3.3"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150500.10.3.3"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.21.0-1ubuntu1.4+esm1"}]}],"versions":["1:1.20.0-8.1ubuntu1","1:1.20.0-9ubuntu1","1:1.20.0-9ubuntu2","1:1.21.0-1ubuntu1","1:1.21.0-1ubuntu1.4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.22.0-15ubuntu1.4+esm2"}]}],"versions":["1:1.22.0-15ubuntu1","1:1.22.0-15ubuntu1.4","1:1.22.0-15ubuntu1.4+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.27.2-2ubuntu3.4+esm1"}]}],"versions":["1:1.22.0-19ubuntu2","1:1.27.2-1ubuntu3","1:1.27.2-1ubuntu4","1:1.27.2-2ubuntu2","1:1.27.2-2ubuntu3","1:1.27.2-2ubuntu3.1","1:1.27.2-2ubuntu3.2","1:1.27.2-2ubuntu3.3","1:1.27.2-2ubuntu3.4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.30.1-4ubuntu6.5"}]}],"versions":["1:1.30.1-4ubuntu4","1:1.30.1-4ubuntu5","1:1.30.1-4ubuntu6","1:1.30.1-4ubuntu6.1","1:1.30.1-4ubuntu6.2","1:1.30.1-4ubuntu6.3","1:1.30.1-4ubuntu6.4"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.30.1-7ubuntu3.1"}]}],"versions":["1:1.30.1-6ubuntu3","1:1.30.1-7ubuntu1","1:1.30.1-7ubuntu2","1:1.30.1-7ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.36.1-6ubuntu3.1"}]}],"versions":["1:1.36.1-3ubuntu1","1:1.36.1-6ubuntu1","1:1.36.1-6ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.21.0-1ubuntu1.4+esm1"}]}],"versions":["1:1.20.0-8.1ubuntu1","1:1.20.0-9ubuntu1","1:1.20.0-9ubuntu2","1:1.21.0-1ubuntu1","1:1.21.0-1ubuntu1.4"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.22.0-15ubuntu1.4+esm2"}]}],"versions":["1:1.22.0-15ubuntu1","1:1.22.0-15ubuntu1.4","1:1.22.0-15ubuntu1.4+esm1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.27.2-2ubuntu3.4+esm1"}]}],"versions":["1:1.22.0-19ubuntu2","1:1.27.2-1ubuntu3","1:1.27.2-1ubuntu4","1:1.27.2-2ubuntu2","1:1.27.2-2ubuntu3","1:1.27.2-2ubuntu3.1","1:1.27.2-2ubuntu3.2","1:1.27.2-2ubuntu3.3","1:1.27.2-2ubuntu3.4"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.30.1-4ubuntu6.5"}]}],"versions":["1:1.30.1-4ubuntu4","1:1.30.1-4ubuntu5","1:1.30.1-4ubuntu6","1:1.30.1-4ubuntu6.1","1:1.30.1-4ubuntu6.2","1:1.30.1-4ubuntu6.3","1:1.30.1-4ubuntu6.4"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.30.1-7ubuntu3.1"}]}],"versions":["1:1.30.1-6ubuntu3","1:1.30.1-7ubuntu1","1:1.30.1-7ubuntu2","1:1.30.1-7ubuntu3"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.36.1-6ubuntu3.1"}]}],"versions":["1:1.36.1-3ubuntu1","1:1.36.1-6ubuntu1","1:1.36.1-6ubuntu3"],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36.1-2.1"}]}]}],"products":[{"vendor":"busybox","product":"busybox"},{"vendor":"debian","product":"debian_linux"},{"vendor":"siemens","product":"ruggedcom rst2428p"},{"vendor":"siemens","product":"scalance xc-300/xr-300/xc-400/xr-500wg/xr-500 family"},{"vendor":"siemens","product":"scalance xch328"},{"vendor":"siemens","product":"scalance xcm324"},{"vendor":"siemens","product":"scalance xcm328"},{"vendor":"siemens","product":"scalance xcm332"},{"vendor":"siemens","product":"scalance xrh334 (24 v dc, 8xfo, cc)"},{"vendor":"siemens","product":"scalance xrm334 (230 v ac, 12xfo)"},{"vendor":"siemens","product":"scalance xrm334 (230 v ac, 8xfo)"},{"vendor":"siemens","product":"scalance xrm334 (230v ac, 2x10g, 24xsfp, 8xsfp+)"},{"vendor":"siemens","product":"scalance xrm334 (24 v dc, 12xfo)"},{"vendor":"siemens","product":"scalance xrm334 (24 v dc, 8xfo)"},{"vendor":"siemens","product":"scalance xrm334 (24v dc, 2x10g, 24xsfp, 8xsfp+)"},{"vendor":"siemens","product":"scalance xrm334 (2x230 v ac, 12xfo)"},{"vendor":"siemens","product":"scalance xrm334 (2x230 v ac, 8xfo)"},{"vendor":"siemens","product":"scalance xrm334 (2x230v ac, 2x10g, 24xsfp, 8xsfp+)"},{"vendor":"siemens","product":"sidis secured smartplug"}],"references":[{"url":"https://bugs.busybox.net/show_bug.cgi?id=15216","tags":["x_transferred","Issue Tracking","Vendor Advisory","web","article"]},{"url":"https://security.netapp.com/advisory/ntap-20241129-0001/","tags":["Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html","tags":["Third Party Advisory","web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-089022.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-585531.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-48174","tags":["web","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20241129-0001"},{"url":"https://github.com/advisories/GHSA-w9cc-xrp8-ffx4"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-48174","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-48174","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu18_04-els/CLSA-2023-1693904834","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04-els/CLSA-2023-1693904973","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2023-1693905084.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2023-1693906015.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2025-1760982550.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48174.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-48174","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1583","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:5178","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2237153","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5178.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-48174","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-48174","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233529-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1214538","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-48174","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233729-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233819-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20233820-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-48174","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6335-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-6961-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-28831","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-42363","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-42364","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-42365","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-48174","description":"There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.","status":"published","published":"2023-08-22T00:00:00Z","modified":"2026-07-14T11:54:14.009Z","updated_at":"2026-11-02T14:34:33.574107Z"}],"euvd":[{"id":"EUVD-2022-50885","description":"There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.","status":"published","published":"2023-08-22T00:00:00Z","modified":"2026-07-14T11:54:14Z","updated_at":"2026-11-02T18:20:00.696533Z"}],"ghsa":[{"id":"GHSA-w9cc-xrp8-ffx4","title":"There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment...","description":"There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.","status":"published","published":"2023-08-22T21:30:27Z","modified":"2026-07-14T12:31:06Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T15:09:27.031Z"}],"nvd":[{"id":"CVE-2022-48174","description":"There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.","status":"published","published":"2023-08-22T19:16:31.08Z","modified":"2026-07-14T12:16:48.24Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:07:39.811118Z"}],"osv":[{"id":"ALPINE-CVE-2022-48174","description":"There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.","status":"published","published":"2023-08-22T19:16:31.08Z","modified":"2026-11-03T07:18:33.785103509Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T07:50:38.973973Z"},{"id":"AZL-56490","title":"CVE-2022-48174 affecting package busybox for versions less than 1.35.0-13","description":"There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.","status":"published","published":"2023-08-22T19:16:31Z","modified":"2026-04-21T04:36:08.822244Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:07.209678Z"},{"id":"AZL-64326","title":"CVE-2022-48174 affecting package busybox for versions less than 1.36.1-14","description":"There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.","status":"published","published":"2023-08-22T19:16:31Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-05T16:41:21.518778Z"},{"id":"BELL-CVE-2022-48174","status":"published","published":"2023-08-22T19:16:00Z","modified":"2026-01-26T09:33:02.239044Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:17.151188Z"},{"id":"DEBIAN-CVE-2022-48174","description":"There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.","status":"published","published":"2023-08-22T19:16:31.08Z","modified":"2026-11-03T08:04:12.676213048Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T08:23:07.763774Z"},{"id":"OESA-2023-1583","title":"busybox security update","description":"BusyBox combines tiny versions of many common UNIX utilities into a single small executable. It provides replacements for most of the utilities you usually find in GNU fileutils, shellutils, etc. It provides a fairly complete environment for any small or embedded system.\r\n\r\nSecurity Fix(es):\r\n\r\nThere is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.(CVE-2022-48174)","status":"published","published":"2023-09-02T11:06:02Z","modified":"2026-08-18T01:17:48.492604957Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"RHSA-2023:5178","title":"Red Hat Security Advisory: busybox security update","status":"published","published":"2024-09-16T13:34:07Z","modified":"2026-06-26T11:07:00Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:11.734882Z"},{"id":"ROOT-OS-ALPINE-315-CVE-2022-48174","title":"CVE-2022-48174 in busybox - Patched by Root","description":"Root has patched CVE-2022-48174 in the busybox package for Root:Alpine:3.15. Multiple fixed versions available.","status":"published","published":"2026-09-29T09:26:37Z","modified":"2026-09-29T10:15:13.000672249Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:28.259095Z"},{"id":"ROOT-OS-ALPINE-317-CVE-2022-48174","title":"CVE-2022-48174 in busybox - Patched by Root","description":"Root has patched CVE-2022-48174 in the busybox package for Root:Alpine:3.17. Multiple fixed versions available.","status":"published","published":"2026-09-29T09:36:39Z","modified":"2026-09-29T10:15:23.038356947Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:28.259095Z"},{"id":"UBUNTU-CVE-2022-48174","description":"There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.","status":"published","published":"2023-08-22T19:16:00Z","modified":"2026-02-04T04:12:07.517668Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:53:56.473586Z"},{"id":"CLSA-2023-1693904834","title":"Fix CVE(s): CVE-2022-48174","description":"\n   * SECURITY UPDATE: unlikely stack overflow vulnerability\n     - debian/patches/CVE-2022-48174.patch: break if a number\n       string containing invalid characters\n     - CVE-2022-48174","status":"published","published":"2023-09-05T09:07:18Z","modified":"2026-06-04T10:04:03.853021Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2023-1693904973","title":"Fix CVE(s): CVE-2022-48174","description":"\n   * SECURITY UPDATE: unlikely stack overflow vulnerability\n     - debian/patches/CVE-2022-48174.patch: break if a number\n       string containing invalid characters\n     - CVE-2022-48174","status":"published","published":"2023-09-05T09:09:38Z","modified":"2026-06-04T10:04:26.618498Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2023-1693905084","title":"busybox: Fix of CVE-2022-48174","description":"- CVE-2022-48174: fix unlikely stack overflow\n- testsuite was enabled","status":"published","published":"2023-09-05T09:11:28Z","modified":"2026-06-01T00:33:24.802005368Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2023-1693906015","title":"busybox: Fix of CVE-2022-48174","description":"- CVE-2022-48174: fix unlikely stack overflow\n- testsuite was enabled","status":"published","published":"2023-09-05T09:26:59Z","modified":"2026-06-01T00:32:33.04541456Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2025-1760982550","title":"Fix CVE(s): CVE-2022-48174","description":"   * SECURITY_UPDATE: avoid segfault on ${0::0/0~09J}\n     - debian/patches/CVE-2022-48174.patch: Fix shell segfault in malformed arithmetic\n       expressions\n     - CVE-2022-48174","status":"published","published":"2025-10-20T17:49:15Z","modified":"2026-06-04T10:03:58.874039Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CVE-2022-48174","description":"There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.","status":"published","published":"2023-08-22T00:00:00Z","modified":"2026-10-28T02:30:23.715093299Z","updated_at":"2026-11-02T15:44:27.776402Z"},{"id":"DLA-4019-1","title":"busybox - security update","status":"published","published":"2025-01-19T00:00:00Z","modified":"2026-03-09T01:20:18.239864Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"openSUSE-SU-2024:13181-1","title":"busybox-1.36.1-2.1 on GA media","description":"These are all security issues fixed in the busybox-1.36.1-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:39:12.618999Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"SUSE-SU-2023:3529-1","title":"Security update for busybox","description":"This update for busybox fixes the following issues:\n\n- CVE-2022-48174: Fixed stack overflow vulnerability. (bsc#1214538)\n","status":"published","published":"2023-09-05T09:31:42Z","modified":"2026-02-04T03:37:21.652927Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3729-1","title":"Security update for busybox","description":"This update for busybox fixes the following issues:\n\n- CVE-2022-48174: Fixed stack overflow vulnerability. (bsc#1214538)\n","status":"published","published":"2023-09-22T11:34:43Z","modified":"2026-02-04T02:19:04.032035Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3819-1","title":"Security update for busybox","description":"This update for busybox fixes the following issues:\n\n- CVE-2022-48174: Fixed stack overflow vulnerability. (bsc#1214538)\n","status":"published","published":"2023-09-27T16:37:33Z","modified":"2026-02-04T02:17:26.932217Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"SUSE-SU-2023:3820-1","title":"Security update for busybox","description":"This update for busybox fixes the following issues:\n\n- CVE-2022-48174: Fixed stack overflow vulnerability. (bsc#1214538)\n","status":"published","published":"2023-09-27T16:37:57Z","modified":"2026-02-04T04:08:21.810803Z","updated_at":"2026-11-02T15:53:53.440387Z"},{"id":"USN-6335-1","title":"busybox vulnerabilities","description":"It was discovered that BusyBox incorrectly handled certain malformed gzip\narchives. If a user or automated system were tricked into processing a\nspecially crafted gzip archive, a remote attacker could use this issue to\ncause BusyBox to crash, resulting in a denial of service, or execute\narbitrary code. This issue only affected Ubuntu 14.04 LTS.\n(CVE-2021-28831)\n\nIt was discovered that BusyBox did not properly validate user input when\nperforming certain arithmetic operations. If a user or automated system\nwere tricked into processing a specially crafted file, an attacker could\npossibly use this issue to cause BusyBox to crash, resulting in a denial\nof service, or execute arbitrary code. (CVE-2022-48174)\n","status":"published","published":"2023-09-04T11:50:38Z","modified":"2026-06-29T13:50:56.414502487Z","updated_at":"2026-11-02T16:58:17.305935Z"},{"id":"USN-6961-1","title":"busybox vulnerabilities","description":"It was discovered that BusyBox did not properly validate user input when\nperforming certain arithmetic operations. If a user or automated system\nwere tricked into processing a specially crafted file, an attacker could\npossibly use this issue to cause a denial of service, or execute arbitrary\ncode. (CVE-2022-48174)\n\nIt was discovered that BusyBox incorrectly managed memory when evaluating\ncertain awk expressions. An attacker could possibly use this issue to cause\na denial of service, or execute arbitrary code. This issue only affected\nUbuntu 24.04 LTS. (CVE-2023-42363, CVE-2023-42364, CVE-2023-42365)\n","status":"published","published":"2024-08-14T18:58:35Z","modified":"2026-04-27T17:24:52.271075Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}