USN-6335-1 busybox vulnerabilities

It was discovered that BusyBox incorrectly handled certain malformed gzip archives. If a user or automated system were tricked into processing a specially crafted gzip archive, a remote attacker could use this issue to cause BusyBox to crash, resulting in a denial of service, or execute arbitrary...

Ubuntu 16.04 ESM / 18.04 ESM : BusyBox vulnerabilities (USN-6335-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6335-1 advisory. It was discovered that BusyBox incorrectly handled certain malformed gzip archives. If a user or automated system were tricked into processin...

OESA-2023-1583 busybox security update

BusyBox combines tiny versions of many common UNIX utilities into a single small executable. It provides replacements for most of the utilities you usually find in GNU fileutils, shellutils, etc. It provides a fairly complete environment for any small or embedded system. Security Fixes: There is ...

SUSE CVE-2023-39810

An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal...

CVE-2023-39810

A flaw was found in the BusyBox tool. This issue occurs in the cpio command of BusyBox and may allow attackers to execute a directory traversal. If untrusted archives are extracted, this can result in files written outside of the destination directory or files being overwritten that contain...

CVE-2023-39810

An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal...

AZL-61539 CVE-2023-39810 affecting package busybox for versions less than 1.35.0-14

An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal...

AZL-61600 CVE-2023-39810 affecting package busybox for versions less than 1.36.1-12

An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal...

DEBIAN-CVE-2023-39810

An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal...

CVE-2023-39810

An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal...

Directory traversal

An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal...

UBUNTU-CVE-2023-39810

An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal...

CVE-2023-39810

An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal...

CVE-2023-39810

An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal...

CVE-2023-39810

An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal...

CVE-2023-39810

The entry CVE-2023-39810 covers a directory traversal in BusyBox’s CPIO command, specifically in BusyBox v1.33.2. The Connected documents show multiple advisories and scanners (EulerOS, TencentOS Server 4, Unity Linux, Huawei EulerOS, EulerOS SP11/SP12, etc.) referencing this CVE as affecting Bus...

PT-2023-27118

Name of the Vulnerable Software and Affected Versions Busybox version 1.33.2 Description An issue in the CPIO command of Busybox allows attackers to execute a directory traversal. Recommendations For Busybox version 1.33.2, consider disabling the CPIO command until a patch is available. Restrict...

Busybox 路径遍历漏洞

BusyBox is a suite of applications containing several linux commands and tools by Denis Vlasenko, a Ukrainian individual developer. A security vulnerability exists in Busybox version v1.33.2, which stems from a vulnerability that allows an attacker to perform directory traversal via CPIO commands...

CVE-2023-39810

An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal...

CVE-2023-39810: Improper Limitation of a Pathname to a Restricted Directory

An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal...