CVE-2023-42363

A use-after-free vulnerability was discovered in xasprintf function in xfuncsprintf.c:344 in BusyBox v.1.36.1...

CVE-2023-42364

A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function...

Huawei EulerOS: Security Advisory for busybox (EulerOS-SA-2023-3201)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for busybox (EulerOS-SA-2023-3166)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for busybox (EulerOS-SA-2023-3025)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for busybox (EulerOS-SA-2023-3002)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OracleVM 3.4 : busybox (OVMSA-2023-5178)

The remote OracleVM system is missing necessary patches to address security updates: - There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution...

busybox security and bug fix update

1:1.15.1-21.0.1 - Backport fix for CVE-2022-48174 Orabug: 35819048...

Oracle Linux 6 : busybox (ELSA-2023-5178)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-5178 advisory. 1:1.15.1-21.0.1 - Backport fix for CVE-2022-48174 Orabug: 35819048 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Huawei EulerOS: Security Advisory for busybox (EulerOS-SA-2023-2873)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for busybox (EulerOS-SA-2023-2892)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Arbitrary Code Execution

busybox is vulnerable to Arbitrary Code Execution. The vulnerability exists due to a stack overflow vulnerability which allows an attacker to inject and execute arbitrary codes...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : busybox (SUSE-SU-2023:3820-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3820-1 advisory. - CVE-2022-48174: Fixed stack overflow vulnerability. bsc1214538 Tenable has extracted the preceding...

SUSE: Security Advisory (SUSE-SU-2023:3819-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 Security Update : busybox (SUSE-SU-2023:3819-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3819-1 advisory. - CVE-2022-48174: Fixed stack overflow vulnerability. bsc1214538 Tenable has extracted the preceding description block directly from the SUS...

SUSE-SU-2023:3820-1 Security update for busybox

This update for busybox fixes the following issues: - CVE-2022-48174: Fixed stack overflow vulnerability. bsc1214538...

SUSE-SU-2023:3819-1 Security update for busybox

This update for busybox fixes the following issues: - CVE-2022-48174: Fixed stack overflow vulnerability. bsc1214538...

SUSE: Security Advisory (SUSE-SU-2023:3729-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux AMI : busybox (ALAS-2023-1832)

The version of busybox installed on the remote host is prior to 1.34.1-1.16. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1832 advisory. There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this...

Medium: busybox

Issue Overview: There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution. CVE-2022-48174 Affected Packages: busybox Issue Correction: Run yum update busybox...