2068 matches found
OESA-2025-1857 busybox security update
BusyBox combines tiny versions of many common UNIX utilities into a single small executable. It provides replacements for most of the utilities you usually find in GNU fileutils, shellutils, etc. It provides a fairly complete environment for any small or embedded system. Security Fixes: An issue ...
OESA-2025-1855 busybox security update
BusyBox combines tiny versions of many common UNIX utilities into a single small executable. It provides replacements for most of the utilities you usually find in GNU fileutils, shellutils, etc. It provides a fairly complete environment for any small or embedded system. Security Fixes: An issue ...
Azure Linux 3.0 Security Update: busybox (CVE-2022-48174)
The version of busybox installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-48174 advisory. - There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Interne...
CVE-2022-48174 affecting package busybox for versions less than 1.36.1-14
CVE-2022-48174 affecting package busybox for versions less than 1.36.1-14. A patched version of the package is available...
K000152311: Busybox vulnerabilities CVE-2022-28391 and CVE-2022-30065
Security Advisory Description CVE-2022-28391 BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors. CVE-2022-30065 A...
The vulnerability of the `evaluate` function in the BusyBox command-line utility set allows a hacker to cause a service failure.
The vulnerability of the evaluate function in the BusyBox command-line utilities is related to an incorrect use after its initialization. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability in the command-line utility BusyBox, related to the assignment of the zero pointer, allows a hacker to trigger a service failure.
The vulnerability of the BusyBox command-line utility set is related to a pointer assignment error. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability in the command-line utility BusyBox, related to the assignment of the zero pointer, allows a hacker to trigger a service failure.
The vulnerability of the BusyBox command-line utility set is related to a pointer assignment error. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability in the command-line utility BusyBox, related to the release of an incorrect pointer, allows a hacker to execute arbitrary code.
The vulnerability of the BusyBox command-line utility set is related to the release of an incorrect pointer. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability in the command-line utility BusyBox, related to improper input validation, allows a hacker to trigger a service failure.
The vulnerability of the BusyBox command-line utility set is related to improper validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2021-37555
TX9 Automatic Food Dispenser v3.2.57 devices allow access to a shell as root/superuser, a related issue to CVE-2019-16734. To connect, the telnet service is used on port 23 with the default password of 059AnkJ for the root account. The user can then download the filesystem through preinstalled...
CVE-2019-13473
TELESTAR Bobs Rock Radio, Dabman D10, Dabman i30 Stereo, Imperial i110, Imperial i150, Imperial i200, Imperial i200-cd, Imperial i400, Imperial i450, Imperial i500-bt, and Imperial i600 TN81HH96-g102h-g102 devices have an undocumented TELNET service within the BusyBox subsystem, leading to root...
PT-2025-25781
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel's MCTP implementation has been resolved. The issue occurs in the mctp dump addrinfo function when ifa index is accessed without proper initialization,...
Azure Linux 3.0 Security Update: busybox (CVE-2023-39810)
The version of busybox installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-39810 advisory. - An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal...
CBL Mariner 2.0 Security Update: busybox (CVE-2023-39810)
The version of busybox installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-39810 advisory. - An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal...
CVE-2023-39810 affecting package busybox for versions less than 1.36.1-11
CVE-2023-39810 affecting package busybox for versions less than 1.36.1-11. A patched version of the package is available...
CVE-2023-39810 affecting package busybox for versions less than 1.35.0-14
CVE-2023-39810 affecting package busybox for versions less than 1.35.0-14. A patched version of the package is available...
An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal.
...
ROS-20250430-01
A vulnerability in the BusyBox set of command line utilities is related to a post-release usage error in the awk applet. Exploitation of the vulnerability could allow an attacker acting remotely, compromise a vulnerable system The BusyBox command line utility set vulnerability is related to a NUL...