Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 528
Alerts This Week
Warning Icon 1 528

Ubuntu 16.04: USN-5179-2 Moderate: BusyBox Denial of Service

ubuntu
Calendar Grey May 10, 2022
Dist Ubuntu Esm H88
Tackling a vulnerability in BusyBox that could result in system instability or the execution of unauthorized applications on Ubuntu platforms.
BusyBox could be made to crash or run programs if it received specially crafted input.

Summary

BusyBox could be made to crash or run programs if it received specially

crafted input.

Software Description:

- busybox: Tiny utilities for small and embedded systems

Details:

USN-5179-1 fixed vulnerabilities in BusyBox. This update provides the

corresponding updates for Ubuntu 16.04 ESM.

Original advisory details:

 It was discovered that BusyBox incorrectly handled certain malformed gzip

 archives. If a user or automated system were tricked into processing a

 specially crafted gzip archive, a remote attacker could use this issue to

 cause BusyBox to crash, resulting in a denial of service, or possibly

 execute arbitrary code. (CVE-2021-28831)

Topics%20covered

Topics Covered

security advisory denial of service remote execution ubuntu busybox

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 ESM:
   busybox                         1:1.22.0-15ubuntu1.4+esm1
   busybox-initramfs               1:1.22.0-15ubuntu1.4+esm1
   busybox-static                  1:1.22.0-15ubuntu1.4+esm1

In general, a standard system update will make all the necessary changes.

References

  https://ubuntu.com/security/notices/USN-5179-2

  https://ubuntu.com/security/notices/USN-5179-1

  CVE-2021-28831

May 10, 2022

Topics%20covered

Topics Covered

security advisory denial of service remote execution ubuntu busybox

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.