CRITICAL 9.8 Microsoft

CVE-2022-48174

There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.

Microsoft Security Update 2023-Aug: There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.

Affected Products

References

Published: 2023-08-08 · Source: Microsoft · Feed updated: 2026-10-30
This critical severity vulnerability with a CVSS score of 9.8 was published on 2023-08-08 via Microsoft. Affected: cbl2 busybox 1.35.0-13 on CBL Mariner 2.0, cbl2 busybox 1.35.0-14 on CBL Mariner 2.0, cbl2 busybox 1.35.0-14 on CBL-Mariner 2.0 and 1 more.

Risk Timeline

CVE Disclosed2023-08-08 · 1179 days ago

Remediation Resources

Official Advisory
msrc.microsoft.com/update-guide/vulnerability/CVE-2022-48174
NVD / MITRE
nvd.nist.gov/vuln/detail/CVE-2022-48174

Related Vulnerabilities

CVETitleSeverityCVSS
CVE-2017-20230Storable versions before 3.05 for Perl has a stack overflowCRITICAL10.0
CVE-2026-27143Missing bound checks can lead to memory corruption in safe Go in cmd/compileCRITICAL9.8
CVE-2026-31478ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len()CRITICAL9.8
CVE-2021-32292An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) throCRITICAL9.8
CVE-2023-40359xterm before 380 supports ReGIS reporting for character-set names even if they hCRITICAL9.8
CVE-2020-19692Buffer Overflow vulnerabilty found in Nginx NJS v.0feca92 allows a remote attackCRITICAL9.8
vulnfeed aggregates 17475 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.