CVE-2022-28391 affecting package busybox 1.34.1-1

CVE-2022-28391 affecting package busybox 1.34.1-1. A patched version of the package is available...

USN-5179-2: BusyBox vulnerability

USN-5179-1 fixed vulnerabilities in BusyBox. This update provides the corresponding updates for Ubuntu 16.04 ESM. Original advisory details: It was discovered that BusyBox incorrectly handled certain malformed gzip archives. If a user or automated system were tricked into processing a specially...

USN-5179-2 busybox vulnerability

USN-5179-1 fixed vulnerabilities in BusyBox. This update provides the corresponding updates for Ubuntu 16.04 ESM. Original advisory details: It was discovered that BusyBox incorrectly handled certain malformed gzip archives. If a user or automated system were tricked into processing a specially...

Ubuntu 16.04 ESM : BusyBox vulnerability (USN-5179-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5179-2 advisory. USN-5179-1 fixed vulnerabilities in BusyBox. This update provides the corresponding updates for Ubuntu 16.04 ESM. Tenable has extracted the preceding description...

CVE-2022-28391

An escape sequence injection attack was found in BusyBox on Alpine. For this issue to occur, a remote host's virtual terminal must contain an escape sequence, and the victim must then execute netstat. This flaw allows an attacker can inject arbitrary code, leading to a loss of integrity...

OESA-2022-1624 busybox security update

BusyBox combines tiny versions of many common UNIX utilities into a single small executable. It provides replacements for most of the utilities you usually find in GNU fileutils, shellutils, etc. It provides a fairly complete environment for any small or embedded system. Security Fixes: BusyBox...

PT-2022-6589

Name of the Vulnerable Software and Affected Versions Busybox versions 1.35-x Description The issue is related to a use-after-free in the awk applet of Busybox, which can lead to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function. This allo...

Huawei EulerOS: Security Advisory for busybox (EulerOS-SA-2022-1472)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP10 : busybox (EulerOS-SA-2022-1472)

According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted shell command, due to missing validatio...

EulerOS 2.0 SP10 : busybox (EulerOS-SA-2022-1463)

According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted shell command, due to missing validatio...

CLSA-2022-1650377094 Fixed CVE-2022-28391 in busybox

CVE-2022-28391: fix possible terminal injection attacks from DNS query results...

BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively the attacker could choose to change the terminal's colors.

...

Cross Site Scripting (XSS)

busybox is vulnerable to Cross Site Scripting XSS. The vulnerability exists due to arbitrary code execution which allows an attacker to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal...

Mageia: Security Advisory (MGASA-2022-0135)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2022-0135 Updated busybox packages fix security vulnerability

BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors. CVE-2022-28391...

Updated busybox packages fix security vulnerability

BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors. CVE-2022-28391...

CVE-2021-42380 affecting package busybox for versions less than 1.35.0-1

CVE-2021-42380 affecting package busybox for versions less than 1.35.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-42379 affecting package busybox for versions less than 1.35.0-1

CVE-2021-42379 affecting package busybox for versions less than 1.35.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-42385 affecting package busybox for versions less than 1.35.0-1

CVE-2021-42385 affecting package busybox for versions less than 1.35.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-42384 affecting package busybox for versions less than 1.35.0-1

CVE-2021-42384 affecting package busybox for versions less than 1.35.0-1. An upgraded version of the package is available that resolves this issue...