CVE:CVE-2017-16544
CNNVD:CNNVD-201711-180
BusyBox是乌克兰软件开发者Denis Vlasenko所负责维护的一套包含了多个linux命令和工具的应用程序。
BusyBox 1.27.2及之前的版本中的libbb/lineedit.c文件的‘add_match’函数存在安全漏洞，该漏洞源于程序没有过滤文件名。攻击者可利用该漏洞执行代码或写入任意文件。
solution:Upgrade busybox busybox to a higher version than 1.27.2,and avoid the version (,1.27.2]; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade vmware esxi to a higher version than 6.0,6.0:1,6.0:1a,6.0:1b,6.0:2,6.0:3,6.0:3a,6.0:600-201504401,6.0:600-201505401,6.0:600-201507101,6.0:600-201507102,6.0:600-201507401,6.0:600-201507402,6.0:600-201507403,6.0:600-201507404,6.0:600-201507405,6.0:600-201507406,6.0:600-201507407,6.0:600-201509101,6.0:600-201509102,6.0:600-201509201,6.0:600-201509202,6.0:600-201509203,6.0:600-201509204,6.0:600-201509205,6.0:600-201509206,6.0:600-201509207,6.0:600-201509208,6.0:600-201509209,6.0:600-201509210,6.0:600-201510401,6.0:600-201511401,6.0:600-201601101,6.0:600-201601102,6.0:600-201601401,6.0:600-201601402,6.0:600-201601403,6.0:600-201601404,6.0:600-201601405,6.0:600-201602401,6.0:600-201603101,6.0:600-201603102,6.0:600-201603201,6.0:600-201603202,6.0:600-201603203,6.0:600-201603204,6.0:600-201603205,6.0:600-201603206,6.0:600-201603207,6.0:600-201603208,6.0:600-201605401,6.0:600-201608101,6.0:600-201608401,6.0:600-201608402,6.0:600-201608403,6.0:600-201608404,6.0:600-201608405,6.0:600-201610410,6.0:600-201611401,6.0:600-201611402,6.0:600-201611403,6.0:600-201702101,6.0:600-201702102,6.0:600-201702201,6.0:600-201702202,6.0:600-201702203,6.0:600-201702204,6.0:600-201702205,6.0:600-201702206,6.0:600-201702207,6.0:600-201702208,6.0:600-201702209,6.0:600-201702210,6.0:600-201702211,6.0:600-201702212,6.0:600-201703401,6.0:600-201706101,6.0:600-201706102,6.0:600-201706103,6.0:600-201706401,6.0:600-201706402,6.0:600-201706403,6.0:600-201710301,6.0:600-201811001,6.0:600-201811401,6.0:600-201903001,6.0:600-201905001,6.0:600-201909001,6.5,6.5:650-201701001,6.5:650-201703001,6.5:650-201703002,6.5:650-201704001,6.5:650-201707101,6.5:650-201707102,6.5:650-201707103,6.5:650-201707201,6.5:650-201707202,6.5:650-201707203,6.5:650-201707204,6.5:650-201707205,6.5:650-201707206,6.5:650-201707207,6.5:650-201707208,6.5:650-201707209,6.5:650-201707210,6.5:650-201707211,6.5:650-201707212,6.5:650-201707213,6.5:650-201707214,6.5:650-201707215,6.5:650-201707216,6.5:650-201707217,6.5:650-201707218,6.5:650-201707219,6.5:650-201707220,6.5:650-201707221,6.5:650-201710001,6.5:650-201712001,6.5:650-201803001,6.5:650-201806001,6.5:650-201808001,6.5:650-201810001,6.5:650-201810002,6.5:650-201811001,6.5:650-201811002,6.5:650-201811301,6.5:650-201901001,6.5:650-201903001,6.5:650-201905001,6.7,6.7:670-201806001,6.7:670-201807001,6.7:670-201808001,6.7:670-201810001,6.7:670-201810101,6.7:670-201810102,6.7:670-201810103,6.7:670-201810201,6.7:670-201810202,6.7:670-201810203,6.7:670-201810204,6.7:670-201810205,6.7:670-201810206,6.7:670-201810207,6.7:670-201810208,6.7:670-201810209,6.7:670-201810210,6.7:670-201810211,6.7:670-201810212,6.7:670-201810213,6.7:670-201810214,6.7:670-201810215,6.7:670-201810216,6.7:670-201810217,6.7:670-201810218,6.7:670-201810219,6.7:670-201810220,6.7:670-201810221,6.7:670-201810222,6.7:670-201810223,6.7:670-201810224,6.7:670-201810225,6.7:670-201810226,6.7:670-201810227,6.7:670-201810228,6.7:670-201810229,6.7:670-201810230,6.7:670-201810231,6.7:670-201810232,6.7:670-201810233,6.7:670-201810234,6.7:670-201811001,6.7:670-201901001,6.7:670-201901401,6.7:670-201901402,6.7:670-201901403,6.7:670-201903001,6.7:670-201904001,and avoid the version 6.0,6.0:1,6.0:1a,6.0:1b,6.0:2,6.0:3,6.0:3a,6.0:600-201504401,6.0:600-201505401,6.0:600-201507101,6.0:600-201507102,6.0:600-201507401,6.0:600-201507402,6.0:600-201507403,6.0:600-201507404,6.0:600-201507405,6.0:600-201507406,6.0:600-201507407,6.0:600-201509101,6.0:600-201509102,6.0:600-201509201,6.0:600-201509202,6.0:600-201509203,6.0:600-201509204,6.0:600-201509205,6.0:600-201509206,6.0:600-201509207,6.0:600-201509208,6.0:600-201509209,6.0:600-201509210,6.0:600-201510401,6.0:600-201511401,6.0:600-201601101,6.0:600-201601102,6.0:600-201601401,6.0:600-201601402,6.0:600-201601403,6.0:600-201601404,6.0:600-201601405,6.0:600-201602401,6.0:600-201603101,6.0:600-201603102,6.0:600-201603201,6.0:600-201603202,6.0:600-201603203,6.0:600-201603204,6.0:600-201603205,6.0:600-201603206,6.0:600-201603207,6.0:600-201603208,6.0:600-201605401,6.0:600-201608101,6.0:600-201608401,6.0:600-201608402,6.0:600-201608403,6.0:600-201608404,6.0:600-201608405,6.0:600-201610410,6.0:600-201611401,6.0:600-201611402,6.0:600-201611403,6.0:600-201702101,6.0:600-201702102,6.0:600-201702201,6.0:600-201702202,6.0:600-201702203,6.0:600-201702204,6.0:600-201702205,6.0:600-201702206,6.0:600-201702207,6.0:600-201702208,6.0:600-201702209,6.0:600-201702210,6.0:600-201702211,6.0:600-201702212,6.0:600-201703401,6.0:600-201706101,6.0:600-201706102,6.0:600-201706103,6.0:600-201706401,6.0:600-201706402,6.0:600-201706403,6.0:600-201710301,6.0:600-201811001,6.0:600-201811401,6.0:600-201903001,6.0:600-201905001,6.0:600-201909001,6.5,6.5:650-201701001,6.5:650-201703001,6.5:650-201703002,6.5:650-201704001,6.5:650-201707101,6.5:650-201707102,6.5:650-201707103,6.5:650-201707201,6.5:650-201707202,6.5:650-201707203,6.5:650-201707204,6.5:650-201707205,6.5:650-201707206,6.5:650-201707207,6.5:650-201707208,6.5:650-201707209,6.5:650-201707210,6.5:650-201707211,6.5:650-201707212,6.5:650-201707213,6.5:650-201707214,6.5:650-201707215,6.5:650-201707216,6.5:650-201707217,6.5:650-201707218,6.5:650-201707219,6.5:650-201707220,6.5:650-201707221,6.5:650-201710001,6.5:650-201712001,6.5:650-201803001,6.5:650-201806001,6.5:650-201808001,6.5:650-201810001,6.5:650-201810002,6.5:650-201811001,6.5:650-201811002,6.5:650-201811301,6.5:650-201901001,6.5:650-201903001,6.5:650-201905001,6.7,6.7:670-201806001,6.7:670-201807001,6.7:670-201808001,6.7:670-201810001,6.7:670-201810101,6.7:670-201810102,6.7:670-201810103,6.7:670-201810201,6.7:670-201810202,6.7:670-201810203,6.7:670-201810204,6.7:670-201810205,6.7:670-201810206,6.7:670-201810207,6.7:670-201810208,6.7:670-201810209,6.7:670-201810210,6.7:670-201810211,6.7:670-201810212,6.7:670-201810213,6.7:670-201810214,6.7:670-201810215,6.7:670-201810216,6.7:670-201810217,6.7:670-201810218,6.7:670-201810219,6.7:670-201810220,6.7:670-201810221,6.7:670-201810222,6.7:670-201810223,6.7:670-201810224,6.7:670-201810225,6.7:670-201810226,6.7:670-201810227,6.7:670-201810228,6.7:670-201810229,6.7:670-201810230,6.7:670-201810231,6.7:670-201810232,6.7:670-201810233,6.7:670-201810234,6.7:670-201811001,6.7:670-201901001,6.7:670-201901401,6.7:670-201901402,6.7:670-201901403,6.7:670-201903001,6.7:670-201904001; Upgrade redlion n-tron_702-w_firmware to a higher version than *; Upgrade redlion n-tron_702m12-w_firmware to a higher version than *; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,and avoid the version 14.04,16.04