점검 대응높음KEV 미등록
CVE-2026-29004
vda-linux busybox_mirror, Red Hat Hardened Images, Red Hat Enterprise Linux 6 취약점
BusyBox before commit 42202bf contains a heap buffer overflow vulnerability in the DHCPv6 client (udhcpc6) DNS_SERVERS option handler in networking/udhcp/d6_dhcpc.c that allows network-adjacent attackers to trigger memory corruption by sending a crafted DHCPv6 response with a malformed D6_OPT_DNS_SERVERS option. Attackers can exploit incorrect heap buffer allocation calculations in the option_to_env() function to cause denial of service or achieve arbitrary code execution on embedded systems without heap hardening.
- 대응 우선순위
- 점검
- CVSS
- 7.2
- EPSS
- 0.38% 백분위 30.3% · 2026.08.04 기준
- CISA KEV
- 미등록
- 조치 기한
- -
- 공개일
- 2026.05.05