CVE ID:	CVE-2016-2147
Description:	Integer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to cause a denial of service (crash) via a malformed RFC1035-encoded domain name, which triggers an out-of-bounds heap write.
Test IDs:	1.3.6.1.4.1.25623.1.1.4.2022.3959.1   1.3.6.1.4.1.25623.1.0.891445   1.3.6.1.4.1.25623.1.0.892559
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-2147 20190612 SEC Consult SA-20190612-0 :: Multiple vulnerabilities in WAGO 852 Industrial Managed Switch Series http://seclists.org/fulldisclosure/2019/Jun/18 20190613 SEC Consult SA-20190612-0 :: Multiple vulnerabilities in WAGO 852 Industrial Managed Switch Series https://seclists.org/bugtraq/2019/Jun/14 20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X http://seclists.org/fulldisclosure/2019/Sep/7 20190904 SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X https://seclists.org/bugtraq/2019/Sep/7 20200827 SEC Consult SA-20200827-0 :: Multiple Vulnerabilities in ZTE mobile Hotspot MS910S http://seclists.org/fulldisclosure/2020/Aug/20 GLSA-201612-04 https://security.gentoo.org/glsa/201612-04 USN-3935-1 https://usn.ubuntu.com/3935-1/ [debian-lts-announce] 20180727 [SECURITY] [DLA 1445-1] busybox security update https://lists.debian.org/debian-lts-announce/2018/07/msg00037.html [debian-lts-announce] 20210215 [SECURITY] [DLA 2559-1] busybox security update https://lists.debian.org/debian-lts-announce/2021/02/msg00020.html [oss-security] 20160311 two udhcpc (busybox) issues http://www.openwall.com/lists/oss-security/2016/03/11/16 http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html http://packetstormsecurity.com/files/154361/Cisco-Device-Hardcoded-Credentials-GNU-glibc-BusyBox.html https://busybox.net/news.html https://busybox.net/news.html https://git.busybox.net/busybox/commit/?id=d474ffc68290e0a83651c4432eeabfa62cd51e87 https://git.busybox.net/busybox/commit/?id=d474ffc68290e0a83651c4432eeabfa62cd51e87