CVE-2022-48174
Fixed in a distro release EPSS 3%
There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.
Products: Siemens RUGGEDCOM RST2428P, Siemens SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family, Siemens SCALANCE XCH328, Siemens SCALANCE XCM324, Siemens SCALANCE XCM328, Siemens SCALANCE XCM332, Siemens SCALANCE XRH334 (24 V DC, 8xFO, CC), Siemens SCALANCE XRM334 (230 V AC, 12xFO), Siemens SCALANCE XRM334 (230 V AC, 8xFO), Siemens SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+), Siemens SCALANCE XRM334 (24 V DC, 12xFO), Siemens SCALANCE XRM334 (24 V DC, 8xFO), Siemens SCALANCE XRM334 (24V DC, 2x10G, 24xSFP, 8xSFP+), Siemens SCALANCE XRM334 (2x230 V AC, 12xFO), Siemens SCALANCE XRM334 (2x230 V AC, 8xFO), Siemens SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+), Siemens SIDIS Secured SmartPlug
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.18 | busybox | 1.36.1-r1 |
| Alpine 3.19 | busybox | 1.36.1-r2 |
| Alpine 3.20 | busybox | 1.36.1-r2 |
| Alpine 3.21 | busybox | 1.36.1-r2 |
| Alpine 3.22 | busybox | 1.36.1-r2 |
| Alpine 3.23 | busybox | 1.36.1-r2 |
| Alpine 3.24 | busybox | 1.36.1-r2 |
| Debian 11 | busybox | 1:1.30.1-6+deb11u1 |
| Debian 12 | busybox | 1:1.35.0-4+deb12u1 |
| Debian 13 | busybox | 1:1.37.0-1 |
| Debian 14 | busybox | 1:1.37.0-1 |
| Red Hat rhel els 6 | busybox | 1:1.15.1-21.el6_10.1 |
| Red Hat rhel els 6 | busybox-petitboot | 1:1.15.1-21.el6_10.1 |
| SUSE Enterprise Storage 7 | busybox | 1.35.0-150000.4.20.1 |
| SUSE Enterprise Storage 7.1 | busybox | 1.35.0-150000.4.20.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | busybox | 1.35.0-150000.4.20.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | busybox | 1.35.0-150000.4.20.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS | busybox | 1.35.0-150000.4.20.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | busybox | 1.35.0-150000.4.20.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP4 | busybox | 1.35.0-150400.3.11.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP5 | busybox | 1.35.0-150500.10.3.3 |
| SUSE Linux Enterprise Server 12 SP5 | busybox | 1.35.0-4.12.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | busybox | 1.35.0-150000.4.20.1 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | busybox | 1.35.0-150000.4.20.1 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | busybox | 1.35.0-150000.4.20.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | busybox | 1.35.0-4.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | busybox | 1.35.0-150000.4.20.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | busybox | 1.35.0-150000.4.20.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | busybox | 1.35.0-150000.4.20.1 |
| SUSE Manager Proxy 4.2 | busybox | 1.35.0-150000.4.20.1 |
| SUSE Manager Server 4.2 | busybox | 1.35.0-150000.4.20.1 |
| Ubuntu 20.04 LTS | busybox | 1:1.30.1-4ubuntu6.5 |
| Ubuntu 22.04 LTS | busybox | 1:1.30.1-7ubuntu3.1 |
| Ubuntu 24.04 LTS | busybox | 1:1.36.1-6ubuntu3.1 |
| Ubuntu Pro 14.04 LTS | busybox | 1:1.21.0-1ubuntu1.4+esm1 |
| Ubuntu Pro 16.04 LTS | busybox | 1:1.22.0-15ubuntu1.4+esm2 |
| Ubuntu Pro 18.04 LTS | busybox | 1:1.27.2-2ubuntu3.4+esm1 |
| openSUSE Leap 15.4 | busybox | 1.35.0-150400.3.11.1 |
| openSUSE Leap 15.4 | busybox-links | 1.35.0-150400.4.5.1 |
| openSUSE Leap 15.5 | busybox | 1.35.0-150500.10.3.3 |
| openSUSE Leap 15.5 | busybox-links | 1.35.0-150400.4.5.1 |
| openSUSE Tumbleweed | busybox | 1.36.1-2.1 |