AZL-113939
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-113939.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-113939
- Upstream
- CVE-2026-124741
- Published
- 2026-11-11T11:17:17Z
- Modified
- 2026-11-15T14:16:44Z
- Summary
- CVE-2026-124741 affecting package busybox 1.36.1-28
- Details
-
A flaw was found in BusyBox. The udhcpc6 DHCPv6 client does not properly validate the size of network options sent by a server before copying them into memory. A malicious DHCPv6 server on the local network can exploit this flaw by sending a crafted reply, triggering a stack-based buffer overflow. This vulnerability could allow an attacker to achieve arbitrary code execution with root privileges or cause a denial of service (DoS) crash.
- References