A memory corruption vulnerability in BusyBox within Red Hat Hardened Images poses a significant risk of unauthorized system modification or elevated access.

This is an out-of-bounds write (CWE-787) vulnerability triggered within the passwd or group tokenize function. The flaw requires high privileges (PR:H) to exploit, as indicated by the CVSS vector.

The vulnerability carries a CVSS score of 6.7, reflecting a medium severity rating, though the impact on system integrity and confidentiality is substantial. Successful exploitation could allow an attacker with high privileges to corrupt heap memory, potentially leading to unauthorized system changes or escalation of control. Organizations relying on these hardened images must treat this as a priority to maintain the security posture of their containerized or virtualized environments.

Immediate Action: Update Red Hat Hardened Images to the latest version provided by the vendor to receive the corrected BusyBox components.

Proactive Monitoring: Review system access logs for anomalous behavior or unexpected process crashes that may indicate exploitation attempts.

Compensating Controls: Ensure strict adherence to the principle of least privilege, limiting the number of high-privileged accounts capable of interacting with the vulnerable functions.

Public Exploit Available: No (exploit_available: unknown)

Given the potential for memory corruption and the critical nature of hardened images in enterprise security, administrators should audit their current image library against the latest Red Hat security bulletins. Apply the vendor-supplied updates as soon as they become available to ensure the integrity of the underlying system binaries.