BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively the attacker could choose to change the terminal's colors.

...

Cross Site Scripting (XSS)

busybox is vulnerable to Cross Site Scripting XSS. The vulnerability exists due to arbitrary code execution which allows an attacker to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal...

Mageia: Security Advisory (MGASA-2022-0135)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated busybox packages fix security vulnerability

BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors. CVE-2022-28391...

MGASA-2022-0135 Updated busybox packages fix security vulnerability

BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors. CVE-2022-28391...

CVE-2021-42385 affecting package busybox for versions less than 1.35.0-1

CVE-2021-42385 affecting package busybox for versions less than 1.35.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-42379 affecting package busybox for versions less than 1.35.0-1

CVE-2021-42379 affecting package busybox for versions less than 1.35.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-42376 affecting package busybox for versions less than 1.35.0-1

CVE-2021-42376 affecting package busybox for versions less than 1.35.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-42381 affecting package busybox for versions less than 1.35.0-1

CVE-2021-42381 affecting package busybox for versions less than 1.35.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-42382 affecting package busybox for versions less than 1.35.0-1

CVE-2021-42382 affecting package busybox for versions less than 1.35.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-42380 affecting package busybox for versions less than 1.35.0-1

CVE-2021-42380 affecting package busybox for versions less than 1.35.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-42384 affecting package busybox for versions less than 1.35.0-1

CVE-2021-42384 affecting package busybox for versions less than 1.35.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-42386 affecting package busybox for versions less than 1.35.0-1

CVE-2021-42386 affecting package busybox for versions less than 1.35.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-42378 affecting package busybox for versions less than 1.35.0-1

CVE-2021-42378 affecting package busybox for versions less than 1.35.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-42374 affecting package busybox for versions less than 1.35.0-1

CVE-2021-42374 affecting package busybox for versions less than 1.35.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-28831 affecting package busybox for versions less than 1.32.0-2

CVE-2021-28831 affecting package busybox for versions less than 1.32.0-2. A patched version of the package is available...

CVE-2022-28391

BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors...

AZL-41790 CVE-2022-28391 affecting package busybox for versions less than 1.36.1-3

BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors...

ALPINE-CVE-2022-28391

BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors...

AZL-9311 CVE-2022-28391 affecting package busybox for versions less than 1.35.0-2

BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors...