CVE-2022-28391: High severity BusyBox BusyBox vulnerability
BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/busyboxto a version that resolves this vulnerability.Fixed in 1.31.1-r22 - Upgrade
Upgrade
alpine/busyboxto a version that resolves this vulnerability.Fixed in 1.32.1-r8 - Upgrade
Upgrade
alpine/busyboxto a version that resolves this vulnerability.Fixed in 1.33.1-r7 - Upgrade
Upgrade
alpine/busyboxto a version that resolves this vulnerability.Fixed in 1.34.1-r5 - Upgrade
Upgrade
alpine/busyboxto a version that resolves this vulnerability.Fixed in 1.35.0-r7
Event History
Frequently Asked Questions
What is the vulnerability ID for this BusyBox vulnerability?
The vulnerability ID for this BusyBox vulnerability is CVE-2022-28391.
How severe is the CVE-2022-28391 vulnerability?
The severity of the CVE-2022-28391 vulnerability is high with a severity value of 8.8.
How does BusyBox through version 1.35.0 allow remote attackers to execute arbitrary code?
BusyBox through version 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal.
What can remote attackers do to exploit the CVE-2022-28391 vulnerability in BusyBox?
Remote attackers can execute arbitrary code or choose to change the terminal's colors by exploiting the CVE-2022-28391 vulnerability in BusyBox.
Where can I find more information about the CVE-2022-28391 vulnerability in BusyBox?
You can find more information about the CVE-2022-28391 vulnerability in BusyBox at the following references: [Reference 1](https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch), [Reference 2](https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch), [Reference 3](https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661).