CVE:CVE-2015-9261
CNNVD:CNNVD-201807-1887
BusyBox是乌克兰Denis Vlasenko软件开发者的一套包含了多个linux命令和工具的应用程序。
BusyBox 1.27.2之前版本中的archival/libarchive/decompress_gunzip.c文件的‘huft_build’函数存在代码问题漏洞。该漏洞源于网络系统或产品的代码开发过程中存在设计或实现不当的问题。
solution:Upgrade busybox busybox to a higher version than 1.27.2,and avoid the version (,1.27.2); Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,and avoid the version 14.04,16.04