CVE-2022-48174

T

here is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.

Configurations

Configuration 1 (hide)

cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*

History

18 Dec 2025, 18:20

Type Values Removed Values Added
CPE cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
References () https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html - () https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html - Third Party Advisory
First Time Debian
Debian debian Linux

03 Nov 2025, 21:15

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html -

05 Feb 2025, 18:02

Type Values Removed Values Added
References () https://security.netapp.com/advisory/ntap-20241129-0001/ - () https://security.netapp.com/advisory/ntap-20241129-0001/ - Third Party Advisory

29 Nov 2024, 12:15

Type Values Removed Values Added
References
  • () https://security.netapp.com/advisory/ntap-20241129-0001/ -

21 Nov 2024, 07:32

Type Values Removed Values Added
References () https://bugs.busybox.net/show_bug.cgi?id=15216 - Issue Tracking, Vendor Advisory () https://bugs.busybox.net/show_bug.cgi?id=15216 - Issue Tracking, Vendor Advisory

Information

Published : 2023-08-22 19:16

Updated : 2025-12-18 18:20


NVD link : CVE-2022-48174

Mitre link : CVE-2022-48174

CVE.ORG link : CVE-2022-48174


JSON object : View

Products Affected
CWE
CWE-787

Out-of-bounds Write