REDHAT-BUG-2466526: Buffer Overflow
BusyBox before commit 42202bf contains a heap buffer overflow vulnerability in the DHCPv6 client (udhcpc6) DNSSERVERS option handler in networking/udhcp/d6dhcpc.c that allows network-adjacent attackers to trigger memory corruption by sending a crafted DHCPv6 response with a malformed D6OPTDNSSERVERS option. Attackers can exploit incorrect heap buffer allocation calculations in the optiontoenv() function to cause denial of service or achieve arbitrary code execution on embedded systems without heap hardening.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
BusyBox udhcpc6 DHCPv6 client (networking/udhcp/d6_dhcpc.c, option_to_env() D6_OPT_DNS_SERVERS handler)to a version that resolves this vulnerability.Patch 42202bf - Compensating control
Prevent network-adjacent attackers from reaching the DHCPv6 client (udhcpc6) by restricting access to DHCPv6/udhcpc6 exposure (e.g., via network segmentation/ACLs) until patched.
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2466526?
The severity of REDHAT-BUG-2466526 is high, rated at 7.
How do I fix REDHAT-BUG-2466526?
To fix REDHAT-BUG-2466526, you need to update BusyBox to a version that contains the fix for the heap buffer overflow vulnerability.
What vulnerability does REDHAT-BUG-2466526 address?
REDHAT-BUG-2466526 addresses a heap buffer overflow vulnerability in the DHCPv6 client (udhcpc6) DNS_SERVERS option handler.
Can REDHAT-BUG-2466526 be exploited remotely?
Yes, REDHAT-BUG-2466526 can be exploited by network-adjacent attackers sending crafted DHCPv6 responses.
What kind of attacks does REDHAT-BUG-2466526 enable?
REDHAT-BUG-2466526 enables memory corruption attacks due to the heap buffer overflow in the DHCPv6 client.