UBUNTU-CVE-2026-124747: Buffer Overflow
A flaw was found in BusyBox. When resuming a download over File Transfer Protocol (FTP), the wget utility fails to verify that the resume offset does not exceed the file size reported by the server, resulting in an integer calculation error. A malicious FTP server or an on-path network attacker can exploit this issue by returning crafted file size metadata, triggering a heap-based buffer overflow with attacker-controlled data. Successful exploitation may allow an attacker to execute arbitrary code or crash the application, resulting in a denial of service (DoS).
Affected Software
Event History
Frequently Asked Questions
What conditions are required for exploitation?
The vulnerable BusyBox wget utility must be resuming a download over FTP. Exploitation requires a malicious FTP server or an on-path network attacker to provide crafted file-size metadata.
What is the likely impact if exploitation succeeds?
The crafted metadata can trigger a heap-based buffer overflow with attacker-controlled data. This may allow arbitrary code execution or cause the application to crash, resulting in denial of service.