2147 matches found
Huawei EulerOS: Security Advisory for busybox (EulerOS-SA-2022-1988)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for busybox (EulerOS-SA-2022-1958)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP9 : busybox (EulerOS-SA-2022-1988)
According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible...
EulerOS 2.0 SP9 : busybox (EulerOS-SA-2022-1958)
According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible...
Amazon Linux AMI : busybox (ALAS-2022-1608)
The version of busybox installed on the remote host is prior to 1.34.1-1.14. It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1608 advisory. An escape sequence injection attack was found in BusyBox on Alpine. For this issue to occur, a remote host's virtual terminal mu...
Security Bulletin: IBM QRadar Network Security is affected by Vulnerability in busybox (CVE-2021-28831)
Summary IBM QRadar Network Security has addressed vulnerability in BusyBox. The issue could lead to denial of service. Vulnerability Details CVEID:CVE-2021-28831 DESCRIPTION: BusyBox is vulnerable to a denial of service, caused by the mishandling of the error bit on the huftbuild result pointer i...
Medium: busybox
Issue Overview: An escape sequence injection attack was found in BusyBox on Alpine. For this issue to occur, a remote host's virtual terminal must contain an escape sequence, and the victim must then execute netstat. This flaw allows an attacker can inject arbitrary code, leading to a loss of...
Use-After-Free
busybox is vulnerable to use-after-free. The vulnerability exists in copyvar which allows an attacker to send crafted awk pattern crashing the application...
Denial Of Service (DoS)
busybox is vulnerable denial of service. The vulnerability exists due to a pointer free in Busybox's hush applet when processing a crafted shell command...
Denial Of Service (DoS)
busybox is vulnerable denial of service. The vulnerability exists due to a NULL pointer dereference in Busybox's hush applet leads when processing a crafted shell command, due to missing validation after a \x03 delimiter character...
Denial Of Service (DoS)
busybox is vulnerable denial of service. The vulnerability exists due to a NULL pointer dereference in Busybox's man applet leads to denial of service when a section name is supplied but no page argument is given...
CVE-2022-28391 affecting package busybox for versions less than 1.35.0-2
CVE-2022-28391 affecting package busybox for versions less than 1.35.0-2. A patched version of the package is available...
A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.
...
CVE-2022-30065
A flaw was found in BusyBox. It did not properly sanitize while processing a crafted awk pattern, leading to possible code execution...
CVE-2022-30065
A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function...
AZL-9815 CVE-2022-30065 affecting package busybox for versions less than 1.35.0-3
A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function...
ALPINE-CVE-2022-30065
A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function...
CVE-2022-30065
A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function...
