In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.

...

In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.

...

GHSA-WP4Q-9JQ4-GV74 vulnerabilities

Vulnerabilities for packages: busybox...

CVE-2025-46394 vulnerabilities

Vulnerabilities for packages: busybox...

Linux Distros Unpatched Vulnerability : CVE-2021-42382

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvars function...

Linux Distros Unpatched Vulnerability : CVE-2021-42386

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function...

CVE-2024-58251 vulnerabilities

Vulnerabilities for packages: busybox...

GHSA-RRV5-483W-XMR9 vulnerabilities

Vulnerabilities for packages: busybox...

CVE-2024-58251 vulnerabilities

Vulnerabilities for packages: busybox...

GHSA-RRV5-483W-XMR9 vulnerabilities

Vulnerabilities for packages: busybox...

Linux Distros Unpatched Vulnerability : CVE-2021-42378

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvari function...

Linux Distros Unpatched Vulnerability : CVE-2021-42380

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function...

Linux Distros Unpatched Vulnerability : CVE-2021-42381

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hashinit function...

Linux Distros Unpatched Vulnerability : CVE-2021-42384

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handlespecial...

Linux Distros Unpatched Vulnerability : CVE-2024-58251

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv0 containing an ANSI terminal escape sequence, leading to a deni...

Linux Distros Unpatched Vulnerability : CVE-2021-42379

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nextinputfile...

Linux Distros Unpatched Vulnerability : CVE-2025-46394

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences. CVE-2025-46394 Note that...

Linux Distros Unpatched Vulnerability : CVE-2021-42385

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function...

Linux Distros Unpatched Vulnerability : CVE-2018-1000500

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Busybox contains a Missing SSL certificate validation vulnerability in The busybox wget applet that can result in arbitrary code execution. This attack appear t...

OESA-2025-1886 busybox security update

BusyBox combines tiny versions of many common UNIX utilities into a single small executable. It provides replacements for most of the utilities you usually find in GNU fileutils, shellutils, etc. It provides a fairly complete environment for any small or embedded system. Security Fixes: An issue ...