Read the docs
TI-2011-02376 Aliases CVE-2011-2716GHSA-4fjg-vv5f-pmrp

The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote DHCP servers to execute…

Priority LOW 34CWE-20Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.

Summary

The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in the (1) HOST_NAME, (2) DOMAIN_NAME, (3) NIS_DOMAIN, and (4) TFTP_SERVER_NAME host name options.

Why it matters now

EPSS 0.01779 78th percentileScored 2026-11-07
Fix Fixed Red Hat: 2 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 92

CPEVersionsRoleVendor
cpe:2.3:o:t-mobile:tm-ac1900:3.0.0.4.376_3169:*:*:*:*:*:*:*3.0.0.4.376_3169VulnerableT-mobile
cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*up to 1.19.4Vulnerablebusybox
cpe:2.3:a:busybox:busybox:0.60.5:*:*:*:*:*:*:*0.60.5Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.00:*:*:*:*:*:*:*1.00Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.0.0:pre1:*:*:*:*:*:*1.0.0 pre1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.0.0:pre10:*:*:*:*:*:*1.0.0 pre10Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.0.0:pre2:*:*:*:*:*:*1.0.0 pre2Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.0.0:pre3:*:*:*:*:*:*1.0.0 pre3Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.0.0:pre4:*:*:*:*:*:*1.0.0 pre4Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.0.0:pre5:*:*:*:*:*:*1.0.0 pre5Vulnerablebusybox
  • cpe:2.3:o:t-mobile:tm-ac1900:3.0.0.4.376_3169:*:*:*:*:*:*:* Versions 3.0.0.4.376_3169 Vulnerable ·T-mobile
  • cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:* Versions up to 1.19.4 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:0.60.5:*:*:*:*:*:*:* Versions 0.60.5 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.00:*:*:*:*:*:*:* Versions 1.00 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.0.0:pre1:*:*:*:*:*:* Versions 1.0.0 pre1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.0.0:pre10:*:*:*:*:*:* Versions 1.0.0 pre10 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.0.0:pre2:*:*:*:*:*:* Versions 1.0.0 pre2 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.0.0:pre3:*:*:*:*:*:* Versions 1.0.0 pre3 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.0.0:pre4:*:*:*:*:*:* Versions 1.0.0 pre4 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.0.0:pre5:*:*:*:*:*:* Versions 1.0.0 pre5 Vulnerable ·busybox
Show 82 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:busybox:busybox:1.0.0:pre6:*:*:*:*:*:*1.0.0 pre6Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.0.0:pre7:*:*:*:*:*:*1.0.0 pre7Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.0.0:pre8:*:*:*:*:*:*1.0.0 pre8Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.0.0:pre9:*:*:*:*:*:*1.0.0 pre9Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.0.0:rc1:*:*:*:*:*:*1.0.0 rc1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.0.0:rc2:*:*:*:*:*:*1.0.0 rc2Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.0.0:rc3:*:*:*:*:*:*1.0.0 rc3Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.01:*:*:*:*:*:*:*1.01Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.1.0:*:*:*:*:*:*:*1.1.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.1.0:pre1:*:*:*:*:*:*1.1.0 pre1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.1.1:*:*:*:*:*:*:*1.1.1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.1.2:*:*:*:*:*:*:*1.1.2Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.1.3:*:*:*:*:*:*:*1.1.3Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.2.0:*:*:*:*:*:*:*1.2.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.2.1:*:*:*:*:*:*:*1.2.1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.2.2:*:*:*:*:*:*:*1.2.2Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.2.2.1:*:*:*:*:*:*:*1.2.2.1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.3.0:*:*:*:*:*:*:*1.3.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.3.1:*:*:*:*:*:*:*1.3.1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.3.2:*:*:*:*:*:*:*1.3.2Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.4.0:*:*:*:*:*:*:*1.4.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.4.1:*:*:*:*:*:*:*1.4.1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.4.2:*:*:*:*:*:*:*1.4.2Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.5.0:*:*:*:*:*:*:*1.5.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.5.1:*:*:*:*:*:*:*1.5.1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.6.0:*:*:*:*:*:*:*1.6.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.6.1:*:*:*:*:*:*:*1.6.1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.7.0:*:*:*:*:*:*:*1.7.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.7.1:*:*:*:*:*:*:*1.7.1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.7.2:*:*:*:*:*:*:*1.7.2Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.7.3:*:*:*:*:*:*:*1.7.3Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.8.0:*:*:*:*:*:*:*1.8.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.8.1:*:*:*:*:*:*:*1.8.1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.8.2:*:*:*:*:*:*:*1.8.2Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.9.0:*:*:*:*:*:*:*1.9.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.9.1:*:*:*:*:*:*:*1.9.1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.9.2:*:*:*:*:*:*:*1.9.2Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.10.0:*:*:*:*:*:*:*1.10.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.10.1:*:*:*:*:*:*:*1.10.1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.10.2:*:*:*:*:*:*:*1.10.2Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.10.3:*:*:*:*:*:*:*1.10.3Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.10.4:*:*:*:*:*:*:*1.10.4Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.11.0:*:*:*:*:*:*:*1.11.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.11.1:*:*:*:*:*:*:*1.11.1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.11.2:*:*:*:*:*:*:*1.11.2Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.11.3:*:*:*:*:*:*:*1.11.3Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.12.0:*:*:*:*:*:*:*1.12.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.12.1:*:*:*:*:*:*:*1.12.1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.12.2:*:*:*:*:*:*:*1.12.2Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.12.3:*:*:*:*:*:*:*1.12.3Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.12.4:*:*:*:*:*:*:*1.12.4Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.13.0:*:*:*:*:*:*:*1.13.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.13.1:*:*:*:*:*:*:*1.13.1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.13.2:*:*:*:*:*:*:*1.13.2Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.13.3:*:*:*:*:*:*:*1.13.3Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.13.4:*:*:*:*:*:*:*1.13.4Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.14.0:*:*:*:*:*:*:*1.14.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.14.1:*:*:*:*:*:*:*1.14.1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.14.2:*:*:*:*:*:*:*1.14.2Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.14.3:*:*:*:*:*:*:*1.14.3Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.14.4:*:*:*:*:*:*:*1.14.4Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.15.0:*:*:*:*:*:*:*1.15.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.15.1:*:*:*:*:*:*:*1.15.1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.15.2:*:*:*:*:*:*:*1.15.2Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.15.3:*:*:*:*:*:*:*1.15.3Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.16.0:*:*:*:*:*:*:*1.16.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.16.1:*:*:*:*:*:*:*1.16.1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.16.2:*:*:*:*:*:*:*1.16.2Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.17.0:*:*:*:*:*:*:*1.17.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.17.1:*:*:*:*:*:*:*1.17.1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.17.2:*:*:*:*:*:*:*1.17.2Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.17.3:*:*:*:*:*:*:*1.17.3Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.17.4:*:*:*:*:*:*:*1.17.4Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.18.0:*:*:*:*:*:*:*1.18.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.18.1:*:*:*:*:*:*:*1.18.1Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.18.2:*:*:*:*:*:*:*1.18.2Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.18.3:*:*:*:*:*:*:*1.18.3Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.18.4:*:*:*:*:*:*:*1.18.4Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.18.5:*:*:*:*:*:*:*1.18.5Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.19.0:*:*:*:*:*:*:*1.19.0Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.19.2:*:*:*:*:*:*:*1.19.2Vulnerablebusybox
cpe:2.3:a:busybox:busybox:1.19.3:*:*:*:*:*:*:*1.19.3Vulnerablebusybox
  • cpe:2.3:a:busybox:busybox:1.0.0:pre6:*:*:*:*:*:* Versions 1.0.0 pre6 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.0.0:pre7:*:*:*:*:*:* Versions 1.0.0 pre7 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.0.0:pre8:*:*:*:*:*:* Versions 1.0.0 pre8 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.0.0:pre9:*:*:*:*:*:* Versions 1.0.0 pre9 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.0.0:rc1:*:*:*:*:*:* Versions 1.0.0 rc1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.0.0:rc2:*:*:*:*:*:* Versions 1.0.0 rc2 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.0.0:rc3:*:*:*:*:*:* Versions 1.0.0 rc3 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.01:*:*:*:*:*:*:* Versions 1.01 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.1.0:*:*:*:*:*:*:* Versions 1.1.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.1.0:pre1:*:*:*:*:*:* Versions 1.1.0 pre1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.1.1:*:*:*:*:*:*:* Versions 1.1.1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.1.2:*:*:*:*:*:*:* Versions 1.1.2 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.1.3:*:*:*:*:*:*:* Versions 1.1.3 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.2.0:*:*:*:*:*:*:* Versions 1.2.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.2.1:*:*:*:*:*:*:* Versions 1.2.1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.2.2:*:*:*:*:*:*:* Versions 1.2.2 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.2.2.1:*:*:*:*:*:*:* Versions 1.2.2.1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.3.0:*:*:*:*:*:*:* Versions 1.3.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.3.1:*:*:*:*:*:*:* Versions 1.3.1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.3.2:*:*:*:*:*:*:* Versions 1.3.2 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.4.0:*:*:*:*:*:*:* Versions 1.4.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.4.1:*:*:*:*:*:*:* Versions 1.4.1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.4.2:*:*:*:*:*:*:* Versions 1.4.2 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.5.0:*:*:*:*:*:*:* Versions 1.5.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.5.1:*:*:*:*:*:*:* Versions 1.5.1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.6.0:*:*:*:*:*:*:* Versions 1.6.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.6.1:*:*:*:*:*:*:* Versions 1.6.1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.7.0:*:*:*:*:*:*:* Versions 1.7.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.7.1:*:*:*:*:*:*:* Versions 1.7.1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.7.2:*:*:*:*:*:*:* Versions 1.7.2 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.7.3:*:*:*:*:*:*:* Versions 1.7.3 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.8.0:*:*:*:*:*:*:* Versions 1.8.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.8.1:*:*:*:*:*:*:* Versions 1.8.1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.8.2:*:*:*:*:*:*:* Versions 1.8.2 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.9.0:*:*:*:*:*:*:* Versions 1.9.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.9.1:*:*:*:*:*:*:* Versions 1.9.1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.9.2:*:*:*:*:*:*:* Versions 1.9.2 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.10.0:*:*:*:*:*:*:* Versions 1.10.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.10.1:*:*:*:*:*:*:* Versions 1.10.1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.10.2:*:*:*:*:*:*:* Versions 1.10.2 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.10.3:*:*:*:*:*:*:* Versions 1.10.3 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.10.4:*:*:*:*:*:*:* Versions 1.10.4 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.11.0:*:*:*:*:*:*:* Versions 1.11.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.11.1:*:*:*:*:*:*:* Versions 1.11.1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.11.2:*:*:*:*:*:*:* Versions 1.11.2 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.11.3:*:*:*:*:*:*:* Versions 1.11.3 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.12.0:*:*:*:*:*:*:* Versions 1.12.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.12.1:*:*:*:*:*:*:* Versions 1.12.1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.12.2:*:*:*:*:*:*:* Versions 1.12.2 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.12.3:*:*:*:*:*:*:* Versions 1.12.3 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.12.4:*:*:*:*:*:*:* Versions 1.12.4 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.13.0:*:*:*:*:*:*:* Versions 1.13.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.13.1:*:*:*:*:*:*:* Versions 1.13.1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.13.2:*:*:*:*:*:*:* Versions 1.13.2 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.13.3:*:*:*:*:*:*:* Versions 1.13.3 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.13.4:*:*:*:*:*:*:* Versions 1.13.4 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.14.0:*:*:*:*:*:*:* Versions 1.14.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.14.1:*:*:*:*:*:*:* Versions 1.14.1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.14.2:*:*:*:*:*:*:* Versions 1.14.2 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.14.3:*:*:*:*:*:*:* Versions 1.14.3 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.14.4:*:*:*:*:*:*:* Versions 1.14.4 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.15.0:*:*:*:*:*:*:* Versions 1.15.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.15.1:*:*:*:*:*:*:* Versions 1.15.1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.15.2:*:*:*:*:*:*:* Versions 1.15.2 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.15.3:*:*:*:*:*:*:* Versions 1.15.3 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.16.0:*:*:*:*:*:*:* Versions 1.16.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.16.1:*:*:*:*:*:*:* Versions 1.16.1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.16.2:*:*:*:*:*:*:* Versions 1.16.2 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.17.0:*:*:*:*:*:*:* Versions 1.17.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.17.1:*:*:*:*:*:*:* Versions 1.17.1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.17.2:*:*:*:*:*:*:* Versions 1.17.2 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.17.3:*:*:*:*:*:*:* Versions 1.17.3 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.17.4:*:*:*:*:*:*:* Versions 1.17.4 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.18.0:*:*:*:*:*:*:* Versions 1.18.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.18.1:*:*:*:*:*:*:* Versions 1.18.1 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.18.2:*:*:*:*:*:*:* Versions 1.18.2 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.18.3:*:*:*:*:*:*:* Versions 1.18.3 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.18.4:*:*:*:*:*:*:* Versions 1.18.4 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.18.5:*:*:*:*:*:*:* Versions 1.18.5 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.19.0:*:*:*:*:*:*:* Versions 1.19.0 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.19.2:*:*:*:*:*:*:* Versions 1.19.2 Vulnerable ·busybox
  • cpe:2.3:a:busybox:busybox:1.19.3:*:*:*:*:*:*:* Versions 1.19.3 Vulnerable ·busybox

Remediation

Red Hat 2 advisories

  • RHSA-2012:0810 Released 2012-06-19 · Red Hat rating Low
    busybox security and bug fix update
    • Red Hat Enterprise Linux Desktop (v. 6) busybox-1:1.15.1-15.el6
    • Red Hat Enterprise Linux Desktop Optional (v. 6) busybox-1:1.15.1-15.el6, busybox-petitboot-1:1.15.1-15.el6
    • Red Hat Enterprise Linux HPC Node (v. 6) busybox-1:1.15.1-15.el6
    • Red Hat Enterprise Linux HPC Node Optional (v. 6) busybox-1:1.15.1-15.el6, busybox-petitboot-1:1.15.1-15.el6
    • Red Hat Enterprise Linux Server (v. 6) busybox-1:1.15.1-15.el6
    • Red Hat Enterprise Linux Server Optional (v. 6) busybox-1:1.15.1-15.el6, busybox-petitboot-1:1.15.1-15.el6
    • Red Hat Enterprise Linux Workstation (v. 6) busybox-1:1.15.1-15.el6
    • Red Hat Enterprise Linux Workstation Optional (v. 6) busybox-1:1.15.1-15.el6, busybox-petitboot-1:1.15.1-15.el6
  • RHSA-2012:0308 Released 2012-02-21 · Red Hat rating Low
    busybox security and bug fix update
    • Red Hat Enterprise Linux (v. 5 server) busybox-1:1.2.0-13.el5, busybox-1:1.2.0-13.el5.i386, busybox-1:1.2.0-13.el5.ia64 +5
    • Red Hat Enterprise Linux Desktop (v. 5 client) busybox-1:1.2.0-13.el5, busybox-1:1.2.0-13.el5.i386, busybox-anaconda-1:1.2.0-13.el5 +1

Vendor assessments

Red Hat

Red Hat rating: Low. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux (v. 5 server)Fixed RHSA-2012:0308
Red Hat Enterprise Linux Desktop (v. 5 client)Fixed RHSA-2012:0308
Red Hat Enterprise Linux Desktop (v. 6)Fixed RHSA-2012:0810
Red Hat Enterprise Linux Desktop Optional (v. 6)Fixed RHSA-2012:0810
Red Hat Enterprise Linux HPC Node (v. 6)Fixed RHSA-2012:0810
Red Hat Enterprise Linux HPC Node Optional (v. 6)Fixed RHSA-2012:0810
Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2012:0810
Red Hat Enterprise Linux Server Optional (v. 6)Fixed RHSA-2012:0810
Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2012:0810
Red Hat Enterprise Linux Workstation Optional (v. 6)Fixed RHSA-2012:0810
Not affected: 1 product
  • Red Hat Enterprise Linux 4

Timeline

  1. 2026-10-02 Threatist record created from CVE-2011-2716
  2. 2026-10-03 Alias added: GHSA-4fjg-vv5f-pmrp

References

Patch 1

Advisory 2

Other 7

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences