CVE-2022-48174
There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35.
Published Aug 22, 2023 · updated Oct 15, 2026
There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Aug 22, 2023 · OSV.dev
Detected
There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.
Oct 15, 2026 · OSV.dev
Fix available
busybox fixed in 1.36.1-r1; busybox fixed in 1.36.1-r2; busybox fixed in 1.36.1-r2; busybox fixed in 1.36.1-r2
Oct 15, 2026 · OSV.dev
Fix available
busybox fixed in 1.36.1-r1
Oct 15, 2026 · OSV.dev
Fix available
busybox fixed in 1.36.1-r2
Oct 15, 2026 · OSV.dev
Updated
There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.
Affected
- Alpine:v3.18 busybox0 → 1.36.1-r1
- Alpine:v3.19 busybox0 → 1.36.1-r2
- Alpine:v3.20 busybox0 → 1.36.1-r2
- Alpine:v3.21 busybox0 → 1.36.1-r2
- Alpine:v3.22 busybox0 → 1.36.1-r2
- Alpine:v3.23 busybox0 → 1.36.1-r2
- Alpine:v3.24 busybox0 → 1.36.1-r2