CVE-2018-20679 - CVE House
Back to Database
Status published Unknown CVE-2018-20679

An issue was discovered in BusyBox before 1.30.0. An out...

Vulnerability Description

An issue was discovered in BusyBox before 1.30.0. An out of bounds read in udhcp components (consumed by the DHCP server, client, and relay) allows a remote attacker to leak sensitive information from the stack by sending a crafted DHCP message. This is related to verification in udhcp_get_option() in networking/udhcp/common.c that 4-byte options are indeed 4 bytes.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-20679

Credits & Attribution

No credits recorded in the NVD database.

References

More from busybox

View All →
CVE-2022-30065
A use-after-free in Busybox 1.35-x's awk applet leads to denial...
Unknown 0
CVE-2022-28391
BusyBox through 1.35.0 allows remote attackers to execute arbitrary code...
Unknown 0
CVE-2021-42386
A use-after-free in Busybox's awk applet leads to denial of...
Unknown 0
CVE-2021-42385
A use-after-free in Busybox's awk applet leads to denial of...
Unknown 0
CVE-2021-42384
A use-after-free in Busybox's awk applet leads to denial of...
Unknown 0

Affected Vendor

Affected Software

busybox, ubuntu linux
Vulnerable Versions:
0, 14.04, 16.04, 18.04, 18.10

Timeline

Official Publish: January 9th, 2019
Last Modified: June 9th, 2025
Added to House: July 20th, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.