Threats tagged 'ghsa-c279-x2f5-7rgj'

An integer overflow vulnerability exists in the volume_id component of BusyBox when calculating buffer boundaries during filesystem metadata probing. This flaw can be triggered by an attacker supplying a specially crafted filesystem image on an attached storage device. Exploitation causes utilities like blkid, findfs, or mount to crash, resulting in a denial of service that prevents mounting or resolving storage devices. The vulnerability primarily affects minimal environments using BusyBox for filesystem probing, such as rescue shells or specialized containers. Standard Red Hat Enterprise Linux systems are largely unaffected as they use util-linux instead of BusyBox for these operations. No fix currently meets Red Hat's criteria for deployment, and mitigation options are limited.