High severity8.1NVD Advisory· Published Jun 26, 2018· Updated Jun 17, 2026
CVE-2018-1000500
CVE-2018-1000500
Description
Busybox contains a Missing SSL certificate validation vulnerability in The "busybox wget" applet that can result in arbitrary code execution. This attack appear to be exploitable via Simply download any file over HTTPS using "busybox wget https://compromised-domain.com/important-file".
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
48- osv-coords47 versionspkg:rpm/opensuse/busybox&distro=openSUSE%20Leap%2015.2pkg:rpm/opensuse/busybox&distro=openSUSE%20Leap%2015.3pkg:rpm/opensuse/busybox&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/busybox&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/busybox-static&distro=openSUSE%20Leap%2015.2pkg:rpm/opensuse/busybox-static&distro=openSUSE%20Leap%2015.3pkg:rpm/opensuse/virtualbox&distro=openSUSE%20Leap%2015.3pkg:rpm/opensuse/virtualbox-kmp&distro=openSUSE%20Leap%2015.3pkg:rpm/suse/busybox&distro=SUSE%20Enterprise%20Storage%206pkg:rpm/suse/busybox&distro=SUSE%20Enterprise%20Storage%207pkg:rpm/suse/busybox&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOSpkg:rpm/suse/busybox&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSSpkg:rpm/suse/busybox&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-ESPOSpkg:rpm/suse/busybox&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSSpkg:rpm/suse/busybox&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOSpkg:rpm/suse/busybox&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSSpkg:rpm/suse/busybox&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2pkg:rpm/suse/busybox&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3pkg:rpm/suse/busybox&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4pkg:rpm/suse/busybox&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP2pkg:rpm/suse/busybox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCLpkg:rpm/suse/busybox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCLpkg:rpm/suse/busybox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSSpkg:rpm/suse/busybox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/busybox&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCLpkg:rpm/suse/busybox&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSSpkg:rpm/suse/busybox&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-BCLpkg:rpm/suse/busybox&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSSpkg:rpm/suse/busybox&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSSpkg:rpm/suse/busybox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4pkg:rpm/suse/busybox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/busybox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015pkg:rpm/suse/busybox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1pkg:rpm/suse/busybox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2pkg:rpm/suse/busybox&distro=SUSE%20Manager%20Proxy%204.1pkg:rpm/suse/busybox&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.1pkg:rpm/suse/busybox&distro=SUSE%20Manager%20Server%204.1pkg:rpm/suse/busybox&distro=SUSE%20OpenStack%20Cloud%209pkg:rpm/suse/busybox&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209pkg:rpm/suse/busybox-static&distro=SUSE%20Enterprise%20Storage%206pkg:rpm/suse/busybox-static&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOSpkg:rpm/suse/busybox-static&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSSpkg:rpm/suse/busybox-static&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2pkg:rpm/suse/busybox-static&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3pkg:rpm/suse/busybox-static&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCLpkg:rpm/suse/busybox-static&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSSpkg:rpm/suse/busybox-static&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1
< 1.26.2-lp152.5.3.1+ 46 more
- (no CPE)range: < 1.26.2-lp152.5.3.1
- (no CPE)range: < 1.26.2-4.5.1
- (no CPE)range: < 1.35.0-150400.3.3.1
- (no CPE)range: < 1.35.0-1.1
- (no CPE)range: < 1.26.2-lp152.5.3.1
- (no CPE)range: < 1.26.2-4.5.1
- (no CPE)range: < 6.1.34-lp153.2.27.2
- (no CPE)range: < 6.1.34-lp153.2.27.1
- (no CPE)range: < 1.26.2-4.5.1
- (no CPE)range: < 1.34.1-4.9.1
- (no CPE)range: < 1.26.2-4.5.1
- (no CPE)range: < 1.26.2-4.5.1
- (no CPE)range: < 1.34.1-4.9.1
- (no CPE)range: < 1.34.1-4.9.1
- (no CPE)range: < 1.26.2-4.5.1
- (no CPE)range: < 1.26.2-4.5.1
- (no CPE)range: < 1.26.2-4.5.1
- (no CPE)range: < 1.26.2-4.5.1
- (no CPE)range: < 1.35.0-150400.3.3.1
- (no CPE)range: < 1.34.1-4.9.1
- (no CPE)range: < 1.35.0-4.3.1
- (no CPE)range: < 1.35.0-4.3.1
- (no CPE)range: < 1.35.0-4.3.1
- (no CPE)range: < 1.35.0-4.3.1
- (no CPE)range: < 1.26.2-4.5.1
- (no CPE)range: < 1.26.2-4.5.1
- (no CPE)range: < 1.34.1-4.9.1
- (no CPE)range: < 1.34.1-4.9.1
- (no CPE)range: < 1.26.2-4.5.1
- (no CPE)range: < 1.35.0-4.3.1
- (no CPE)range: < 1.35.0-4.3.1
- (no CPE)range: < 1.26.2-4.5.1
- (no CPE)range: < 1.26.2-4.5.1
- (no CPE)range: < 1.34.1-4.9.1
- (no CPE)range: < 1.34.1-4.9.1
- (no CPE)range: < 1.34.1-4.9.1
- (no CPE)range: < 1.34.1-4.9.1
- (no CPE)range: < 1.35.0-4.3.1
- (no CPE)range: < 1.35.0-4.3.1
- (no CPE)range: < 1.26.2-4.5.1
- (no CPE)range: < 1.26.2-4.5.1
- (no CPE)range: < 1.26.2-4.5.1
- (no CPE)range: < 1.26.2-4.5.1
- (no CPE)range: < 1.26.2-4.5.1
- (no CPE)range: < 1.26.2-4.5.1
- (no CPE)range: < 1.26.2-4.5.1
- (no CPE)range: < 1.26.2-4.5.1
Patches
Vulnerability mechanics
References
3- git.busybox.net/busybox/commit/nvdPatchVendor Advisory
- lists.busybox.net/pipermail/busybox/2018-May/086462.htmlnvdMailing ListVendor Advisory
- usn.ubuntu.com/4531-1/nvd
News mentions
0No linked articles in our index yet.