{
  "cveId": "CVE-2018-1000500",
  "url": "https://patchblox.com/security/cve/CVE-2018-1000500",
  "summary": "CVE-2018-1000500 is fixed in 6 products on 1 platform, first by busybox 1:1.27.2-2ubuntu3.3, released June 26, 2018. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "busybox: Busybox contains a Missing SSL certificate validation vulnerability in The \u0022busybox wget\u0022 applet that can result in a...",
  "description": "Busybox contains a Missing SSL certificate validation vulnerability in The \u0022busybox wget\u0022 applet that can result in arbitrary code execution. This attack appear to be exploitable via Simply download any file over HTTPS using \u0022busybox wget https://compromised-domain.com/important-file\u0022.",
  "published": "2018-06-26T09:29:00Z",
  "severity": "Medium",
  "epss": 0.02487,
  "epssPercentile": 0.84722,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "busybox",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:1.27.2-2ubuntu3.3",
      "fix": "busybox 1:1.27.2-2ubuntu3.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-busybox-1-1.27.2-2ubuntu3.3",
      "released": "2018-06-26T09:29:00Z"
    },
    {
      "platform": "linux",
      "product": "busybox",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "1:1.30.1-4ubuntu6.2",
      "fix": "busybox 1:1.30.1-4ubuntu6.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-busybox-1-1.30.1-4ubuntu6.2",
      "released": "2018-06-26T09:29:00Z"
    },
    {
      "platform": "linux",
      "product": "busybox-initramfs",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:1.27.2-2ubuntu3.3",
      "fix": "busybox-initramfs 1:1.27.2-2ubuntu3.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-busybox-initramfs-1-1.27.2-2ubuntu3.3",
      "released": "2018-06-26T09:29:00Z"
    },
    {
      "platform": "linux",
      "product": "busybox-initramfs",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "1:1.30.1-4ubuntu6.2",
      "fix": "busybox-initramfs 1:1.30.1-4ubuntu6.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-busybox-initramfs-1-1.30.1-4ubuntu6.2",
      "released": "2018-06-26T09:29:00Z"
    },
    {
      "platform": "linux",
      "product": "busybox-static",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:1.27.2-2ubuntu3.3",
      "fix": "busybox-static 1:1.27.2-2ubuntu3.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-busybox-static-1-1.27.2-2ubuntu3.3",
      "released": "2018-06-26T09:29:00Z"
    },
    {
      "platform": "linux",
      "product": "busybox-static",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "1:1.30.1-4ubuntu6.2",
      "fix": "busybox-static 1:1.30.1-4ubuntu6.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-busybox-static-1-1.30.1-4ubuntu6.2",
      "released": "2018-06-26T09:29:00Z"
    },
    {
      "platform": "linux",
      "product": "busybox-syslogd",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:1.27.2-2ubuntu3.3",
      "fix": "busybox-syslogd 1:1.27.2-2ubuntu3.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-busybox-syslogd-1-1.27.2-2ubuntu3.3",
      "released": "2018-06-26T09:29:00Z"
    },
    {
      "platform": "linux",
      "product": "busybox-syslogd",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "1:1.30.1-4ubuntu6.2",
      "fix": "busybox-syslogd 1:1.30.1-4ubuntu6.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-busybox-syslogd-1-1.30.1-4ubuntu6.2",
      "released": "2018-06-26T09:29:00Z"
    },
    {
      "platform": "linux",
      "product": "udhcpc",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:1.27.2-2ubuntu3.3",
      "fix": "udhcpc 1:1.27.2-2ubuntu3.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-udhcpc-1-1.27.2-2ubuntu3.3",
      "released": "2018-06-26T09:29:00Z"
    },
    {
      "platform": "linux",
      "product": "udhcpc",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "1:1.30.1-4ubuntu6.2",
      "fix": "udhcpc 1:1.30.1-4ubuntu6.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-udhcpc-1-1.30.1-4ubuntu6.2",
      "released": "2018-06-26T09:29:00Z"
    },
    {
      "platform": "linux",
      "product": "udhcpd",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:1.27.2-2ubuntu3.3",
      "fix": "udhcpd 1:1.27.2-2ubuntu3.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-udhcpd-1-1.27.2-2ubuntu3.3",
      "released": "2018-06-26T09:29:00Z"
    },
    {
      "platform": "linux",
      "product": "udhcpd",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "1:1.30.1-4ubuntu6.2",
      "fix": "udhcpd 1:1.30.1-4ubuntu6.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-udhcpd-1-1.30.1-4ubuntu6.2",
      "released": "2018-06-26T09:29:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}