[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fjVmDc4NcI6Nb-39LQMXW3In7QK-M08GfQ-bwQj_wNvo":3,"g5a-risk:CVE-2019-5747":170},{"success":4,"data":5,"meta":168},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":46,"epssPercentile":26,"epssTimeSeries":47,"severity":48,"affectedProducts":49,"affectedProductsCount":40,"references":68,"referencesCount":109,"weaknesses":110,"weaknessesCount":118,"isActivelyExploited":45,"cisaInfo":26,"otxData":26,"relatedBlogPosts":119,"seoMetadata":120,"configurations":145,"relatedVendorCves":166,"notableEvents":167},"CVE-2019-5747","What is CVE-2019-5747?","An issue was discovered in BusyBox through 1.30.0. An out of bounds read in udhcp components (consumed by the DHCP client, server, and\u002For relay) might allow a remote attacker to leak sensitive information from the stack by sending a crafted DHCP message. This is related to assurance of a 4-byte length when decoding DHCP_SUBNET. NOTE: this issue exists because of an incomplete fix for CVE-2018-20679.","An issue was discovered in BusyBox through 1.30.0. An out of bounds read in udhcp components (consumed by the DHCP client, server, and\u002For relay) might allow ...","2019-01-09T16:29:00.353","2025-06-09T16:15:31.28",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":33,"CVSSMetricV2":34,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},[],[35],{"Source":17,"Type":18,"CVSSData":36,"BaseSeverity":42,"ExploitabilityScore":43,"ImpactScore":44,"ACInsufInfo":45,"ObtainAllPrivilege":45,"ObtainUserPrivilege":45,"ObtainOtherPrivilege":45,"UserInteractionRequired":45},{"Version":37,"VectorString":38,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":39,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":40,"BaseSeverity":41,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",5,"","MEDIUM",10,2.9,false,0.04651,[46,46,46,46,46,46,46],"High",[50,54,59,62,65],{"vendor":51,"product":51,"version":52,"criteria":53,"vulnerable":4},"busybox","*","cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*",{"vendor":55,"product":56,"version":57,"criteria":58,"vulnerable":4},"canonical","ubuntu_linux","14.04","cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",{"vendor":55,"product":56,"version":60,"criteria":61,"vulnerable":4},"16.04","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",{"vendor":55,"product":56,"version":63,"criteria":64,"vulnerable":4},"18.04","cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",{"vendor":55,"product":56,"version":66,"criteria":67,"vulnerable":4},"18.10","cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*",[69,76,81,86,90,93,97,99,101,103,105,107],{"url":70,"source":71,"tags":72},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F154361\u002FCisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html","Packetstormsecurity",[73,74,75],"Exploit","Third Party Advisory","VDB Entry",{"url":77,"source":78,"tags":79},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2019\u002FSep\u002F7","Seclists",[80,74],"Mailing List",{"url":82,"source":83,"tags":84},"https:\u002F\u002Fbugs.busybox.net\u002Fshow_bug.cgi?id=11506","Busybox",[73,85,74],"Issue Tracking",{"url":87,"source":83,"tags":88},"https:\u002F\u002Fgit.busybox.net\u002Fbusybox\u002Fcommit\u002F?id=74d9f1ba37010face4bd1449df4d60dd84450b06",[89,74],"Patch",{"url":91,"source":78,"tags":92},"https:\u002F\u002Fseclists.org\u002Fbugtraq\u002F2019\u002FSep\u002F7",[80,74],{"url":94,"source":95,"tags":96},"https:\u002F\u002Fusn.ubuntu.com\u002F3935-1\u002F","Ubuntu",[74],{"url":70,"source":71,"tags":98},[73,74,75],{"url":77,"source":78,"tags":100},[80,74],{"url":82,"source":83,"tags":102},[73,85,74],{"url":87,"source":83,"tags":104},[89,74],{"url":91,"source":78,"tags":106},[80,74],{"url":94,"source":95,"tags":108},[74],12,[111],{"id":112,"name":113,"description":114,"extendedDescription":41,"status":115,"abstraction":116,"structure":117},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","Draft","Base","Simple",1,[],{"title":121,"metaDescription":122,"keywords":123,"canonicalUrl":124,"structuredData":125},"What is CVE-2019-5747? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-5747, a high severity cyber security vulnerability from 2019. An issue was discovered in BusyBox through 1.30.0. An out of...","CVE-2019-5747, CVE-2019-5747 vulnerability, CVE-2019-5747 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, busybox security, canonical security, busybox vulnerability, ubuntu_linux vulnerability","\u002Fwhat-is\u002Fcve-2019-5747",{"@context":126,"@type":127,"headline":121,"description":122,"datePublished":10,"dateModified":11,"author":128,"publisher":132,"about":136,"mainEntityOfPage":140,"articleSection":143,"keywords":144},"https:\u002F\u002Fschema.org","TechArticle",{"@type":129,"name":130,"url":131},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":129,"name":130,"url":131,"logo":133},{"@type":134,"url":135},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":137,"name":6,"description":138,"additionalType":139},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":141,"@id":142},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-5747","Cybersecurity","CVE-2019-5747, CVE-2019-5747 vulnerability, CVE-2019-5747 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[146,154],{"Operator":26,"Negate":26,"Nodes":147},[148],{"Operator":149,"Negate":45,"CPEMatch":150},"OR",[151],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":152,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":153},"E1EEEC52-EA3E-4AB9-8EA6-42C1703D90EF","1.30.0",{"Operator":26,"Negate":26,"Nodes":155},[156],{"Operator":149,"Negate":45,"CPEMatch":157},[158,160,162,164],{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":159,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B5A6F2F3-4894-4392-8296-3B8DD2679084",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":161,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":163,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":165,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"07C312A0-CD2C-4B9C-B064-6409B25C278F",[],[],{"lastModified":11,"cacheTime":169,"version":37},1792372668403,{"score":171,"band":172,"action":173,"scoredAt":174},49,"Medium","Plan remediation","2026-10-16T06:45:21.295993+00:00"]