CVE-2016-2148

Critical

Published: 09/02/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A heap-based buffer overflow was found in the DHCP client (udhcpc) in BusyBox before version 1.25.0. Remote attackers may exploit this vulnerability through unspecified vectors involving OPTION_6RD parsing.

Risk Assessment

This vulnerability could lead to unauthorized access or system instability, posing a threat to the integrity and availability of services.

Recommendation

It is recommended to update BusyBox to version 1.25.0 or later to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

Heap-based buffer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to have unspecified impact via vectors involving OPTION_6RD parsing.