CVE-2018-1000517 - CVE House
Back to Database
Status published Unknown CVE-2018-1000517

BusyBox project BusyBox wget version prior to commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e contains...

Vulnerability Description

BusyBox project BusyBox wget version prior to commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e contains a Buffer Overflow vulnerability in Busybox wget that can result in heap buffer overflow. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in after commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-1000517

Credits & Attribution

No credits recorded in the NVD database.

References

More from busybox

View All →
CVE-2022-30065
A use-after-free in Busybox 1.35-x's awk applet leads to denial...
Unknown 0
CVE-2022-28391
BusyBox through 1.35.0 allows remote attackers to execute arbitrary code...
Unknown 0
CVE-2021-42386
A use-after-free in Busybox's awk applet leads to denial of...
Unknown 0
CVE-2021-42385
A use-after-free in Busybox's awk applet leads to denial of...
Unknown 0
CVE-2021-42384
A use-after-free in Busybox's awk applet leads to denial of...
Unknown 0

Affected Vendor

Affected Software

busybox, debian linux, ubuntu linux
Vulnerable Versions:
0, 8.0, 9.0, 14.04, 16.04, 18.04, 18.10

Timeline

Official Publish: June 26th, 2018
Last Modified: June 9th, 2025
Added to House: July 20th, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.