[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fB8-5heXZlR2mtpTaXVJxlsQEolyY98f49a4JObrdp3I":3,"g5a-risk:CVE-2018-20679":176},{"success":4,"data":5,"meta":174},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":48,"epssPercentile":26,"epssTimeSeries":49,"severity":50,"affectedProducts":51,"affectedProductsCount":42,"references":70,"referencesCount":115,"weaknesses":116,"weaknessesCount":124,"isActivelyExploited":47,"cisaInfo":26,"otxData":26,"relatedBlogPosts":125,"seoMetadata":126,"configurations":151,"relatedVendorCves":172,"notableEvents":173},"CVE-2018-20679","What is CVE-2018-20679?","An issue was discovered in BusyBox before 1.30.0. An out of bounds read in udhcp components (consumed by the DHCP server, client, and relay) allows a remote attacker to leak sensitive information from the stack by sending a crafted DHCP message. This is related to verification in udhcp_get_option() in networking\u002Fudhcp\u002Fcommon.c that 4-byte options are indeed 4 bytes.","An issue was discovered in BusyBox before 1.30.0. An out of bounds read in udhcp components (consumed by the DHCP server, client, and relay) allows a remote ...","2019-01-09T16:29:00.273","2025-06-09T16:15:29.09",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":36,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[30],{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":34,"VectorString":35,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.0","CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[37],{"Source":31,"Type":32,"CVSSData":38,"BaseSeverity":44,"ExploitabilityScore":45,"ImpactScore":46,"ACInsufInfo":47,"ObtainAllPrivilege":47,"ObtainUserPrivilege":47,"ObtainOtherPrivilege":47,"UserInteractionRequired":47},{"Version":39,"VectorString":40,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":41,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":42,"BaseSeverity":43,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",5,"","MEDIUM",10,2.9,false,0.07694,[48,48,48,48,48,48,48],"High",[52,56,61,64,67],{"vendor":53,"product":53,"version":54,"criteria":55,"vulnerable":4},"busybox","*","cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*",{"vendor":57,"product":58,"version":59,"criteria":60,"vulnerable":4},"canonical","ubuntu_linux","14.04","cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",{"vendor":57,"product":58,"version":62,"criteria":63,"vulnerable":4},"16.04","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",{"vendor":57,"product":58,"version":65,"criteria":66,"vulnerable":4},"18.04","cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",{"vendor":57,"product":58,"version":68,"criteria":69,"vulnerable":4},"18.10","cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*",[71,75,79,86,90,94,97,101,103,105,107,109,111,113],{"url":72,"source":73,"tags":74},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F154361\u002FCisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html","Packetstormsecurity",[],{"url":76,"source":77,"tags":78},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2019\u002FSep\u002F7","Seclists",[],{"url":80,"source":81,"tags":82},"https:\u002F\u002Fbugs.busybox.net\u002Fshow_bug.cgi?id=11506","Busybox",[83,84,85],"Exploit","Issue Tracking","Third Party Advisory",{"url":87,"source":81,"tags":88},"https:\u002F\u002Fbusybox.net\u002Fnews.html",[89,85],"Release Notes",{"url":91,"source":81,"tags":92},"https:\u002F\u002Fgit.busybox.net\u002Fbusybox\u002Fcommit\u002F?id=6d3b4bb24da9a07c263f3c1acf8df85382ff562c",[93,85],"Patch",{"url":95,"source":77,"tags":96},"https:\u002F\u002Fseclists.org\u002Fbugtraq\u002F2019\u002FSep\u002F7",[],{"url":98,"source":99,"tags":100},"https:\u002F\u002Fusn.ubuntu.com\u002F3935-1\u002F","Ubuntu",[85],{"url":72,"source":73,"tags":102},[],{"url":76,"source":77,"tags":104},[],{"url":80,"source":81,"tags":106},[83,84,85],{"url":87,"source":81,"tags":108},[89,85],{"url":91,"source":81,"tags":110},[93,85],{"url":95,"source":77,"tags":112},[],{"url":98,"source":99,"tags":114},[85],14,[117],{"id":118,"name":119,"description":120,"extendedDescription":43,"status":121,"abstraction":122,"structure":123},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","Draft","Base","Simple",1,[],{"title":127,"metaDescription":128,"keywords":129,"canonicalUrl":130,"structuredData":131},"What is CVE-2018-20679? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-20679, a high severity cyber security vulnerability from 2019. An issue was discovered in BusyBox before 1.30.0. An out of...","CVE-2018-20679, CVE-2018-20679 vulnerability, CVE-2018-20679 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, busybox security, canonical security, busybox vulnerability, ubuntu_linux vulnerability","\u002Fwhat-is\u002Fcve-2018-20679",{"@context":132,"@type":133,"headline":127,"description":128,"datePublished":10,"dateModified":11,"author":134,"publisher":138,"about":142,"mainEntityOfPage":146,"articleSection":149,"keywords":150},"https:\u002F\u002Fschema.org","TechArticle",{"@type":135,"name":136,"url":137},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":135,"name":136,"url":137,"logo":139},{"@type":140,"url":141},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":143,"name":6,"description":144,"additionalType":145},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":147,"@id":148},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-20679","Cybersecurity","CVE-2018-20679, CVE-2018-20679 vulnerability, CVE-2018-20679 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[152,160],{"Operator":26,"Negate":26,"Nodes":153},[154],{"Operator":155,"Negate":47,"CPEMatch":156},"OR",[157],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":158,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":159,"VersionEndIncluding":26},"9CC63993-043C-41D2-A9E6-D377F2FFBFF1","1.30.0",{"Operator":26,"Negate":26,"Nodes":161},[162],{"Operator":155,"Negate":47,"CPEMatch":163},[164,166,168,170],{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":165,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B5A6F2F3-4894-4392-8296-3B8DD2679084",{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":167,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B",{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":169,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D",{"Vulnerable":4,"Criteria":69,"MatchCriteriaID":171,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"07C312A0-CD2C-4B9C-B064-6409B25C278F",[],[],{"lastModified":11,"cacheTime":175,"version":39},1792367789537,{"score":177,"band":178,"action":179,"scoredAt":180},49,"Medium","Plan remediation","2026-10-16T06:45:21.295731+00:00"]