Lucene search
+L

2154 matches found

CBLMariner
CBLMariner
•added 2022/01/10 3:59 a.m.•28 views

CVE-2021-42379 affecting package busybox 1.32.0-2

CVE-2021-42379 affecting package busybox 1.32.0-2. An upgraded version of the package is available that resolves this issue...

7.2CVSS9.9AI score0.02795EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2021/12/28 12:00 a.m.•12 views

The vulnerability of the next_input_file function in the BusyBox command-line utility set, related to memory usage after deallocation, allows a hacker to execute arbitrary code.

The vulnerability of the nextinputfile function in the BusyBox command-line utility set is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

7.1CVSS7.5AI score0.02795EPSS
SaveExploits0References8Affected Software6
BDU FSTEC
BDU FSTEC
•added 2021/12/28 12:00 a.m.•14 views

The vulnerability of the getvar_i function in the command-line utilities of BusyBox, related to memory usage after deallocation, allows a hacker to execute arbitrary code.

The vulnerability of the getvari function in the command-line utilities of BusyBox relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

7.1CVSS7.5AI score0.02733EPSS
SaveExploits0References9Affected Software6
BDU FSTEC
BDU FSTEC
•added 2021/12/28 12:00 a.m.•18 views

The vulnerability in the command-line utility BusyBox, related to memory usage after deallocation, allows a hacker to execute arbitrary code.

The vulnerability of the BusyBox command-line utility set is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

7.1CVSS7.5AI score0.03087EPSS
SaveExploits0References11Affected Software6
BDU FSTEC
BDU FSTEC
•added 2021/12/28 12:00 a.m.•9 views

The vulnerability in the command-line utility BusyBox, related to memory usage after deallocation, allows a hacker to compromise the vulnerable system.

The vulnerability of the BusyBox command-line utility set is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

7.6CVSS7.5AI score0.02733EPSS
SaveExploits0References8Affected Software6
BDU FSTEC
BDU FSTEC
•added 2021/12/28 12:00 a.m.•15 views

The vulnerability in the command-line utility BusyBox, related to memory usage after deallocation, allows a hacker to execute arbitrary code.

The vulnerability of the BusyBox command-line utility set is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

7.6CVSS7.5AI score0.02795EPSS
SaveExploits0References8Affected Software6
BDU FSTEC
BDU FSTEC
•added 2021/12/28 12:00 a.m.•21 views

The vulnerability in the command-line utility BusyBox, related to memory usage after deallocation, allows an attacker to execute arbitrary code.

The vulnerability of the BusyBox command-line utility set is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.1CVSS7.5AI score0.02756EPSS
SaveExploits0References8Affected Software6
BDU FSTEC
BDU FSTEC
•added 2021/12/28 12:00 a.m.•10 views

The vulnerability in the command-line utility BusyBox, related to memory usage after deallocation, allows a hacker to execute arbitrary code.

The vulnerability of the BusyBox command-line utility set is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.1CVSS7.5AI score0.02733EPSS
SaveExploits0References8Affected Software6
BDU FSTEC
BDU FSTEC
•added 2021/12/28 12:00 a.m.•9 views

The vulnerability in the command-line utility BusyBox, related to memory usage after deallocation, allows a hacker to execute arbitrary code.

The vulnerability of the BusyBox command-line utility set is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

7.6CVSS7.5AI score0.02795EPSS
SaveExploits0References9Affected Software6
BDU FSTEC
BDU FSTEC
•added 2021/12/28 12:00 a.m.•17 views

The vulnerability in the command-line utility BusyBox, related to reading beyond the buffer limit, allows an attacker to access confidential information.

The vulnerability of the BusyBox command-line utility lies in its ability to read beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to trigger a read buffer overflow, thereby reading memory contents of the system or performing a denial-of-service attack...

6.5CVSS7.2AI score0.00623EPSS
SaveExploits1References10Affected Software5
Redos
Redos
•added 2021/12/24 12:00 a.m.•79 views

ROS-20211223-07

BusyBox command line utility suite vulnerability is related to reading beyond memory boundaries. Exploitation The vulnerability could allow an attacker acting remotely to cause a read outside bounds error and read the contents of memory on the system or perform a denial of service DoS attack. A...

7.2CVSS7.3AI score0.03087EPSS
SaveExploits1
Redos
Redos
•added 2021/12/24 12:00 a.m.•48 views

ROS-2-818

2.818 BusyBox Denial of Service CVE-2021-28831 1. Vulnerability Description: The vulnerability allows a remote attacker to perform a denial of service DoS attack. The vulnerability exists due to improper handling of the error bit in the huftbuild result pointer in the decopressgunzip.c file. A...

7.5CVSS7AI score0.02719EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2021/12/08 12:00 a.m.•66 views

Ubuntu 18.04 LTS / 20.04 LTS : BusyBox vulnerabilities (USN-5179-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5179-1 advisory. It was discovered that BusyBox incorrectly handled certain malformed gzip archives. If a user or automated system were tricked into processin...

7.5CVSS7.6AI score0.03087EPSS
SaveExploits1References11
OpenVAS
OpenVAS
•added 2021/12/08 12:00 a.m.•32 views

Ubuntu: Security Advisory (USN-5179-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.9AI score0.03087EPSS
SaveExploits1References2
OSV
OSV
•added 2021/12/07 12:44 p.m.•16 views

USN-5179-1 busybox vulnerabilities

It was discovered that BusyBox incorrectly handled certain malformed gzip archives. If a user or automated system were tricked into processing a specially crafted gzip archive, a remote attacker could use this issue to cause BusyBox to crash, resulting in a denial of service, or possibly execute...

7.5CVSS7AI score0.03087EPSS
SaveExploits1References11
Ubuntu
Ubuntu
•added 2021/12/07 12:44 p.m.•451 views

USN-5179-1: BusyBox vulnerabilities

It was discovered that BusyBox incorrectly handled certain malformed gzip archives. If a user or automated system were tricked into processing a specially crafted gzip archive, a remote attacker could use this issue to cause BusyBox to crash, resulting in a denial of service, or possibly execute...

7.5CVSS7.5AI score0.03087EPSS
SaveExploits1
OpenVAS
OpenVAS
•added 2021/12/04 12:00 a.m.•58 views

Fedora: Security Advisory for busybox (FEDORA-2021-c52c0fe490)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS6.6AI score0.03615EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2021/12/04 12:00 a.m.•92 views

Fedora: Security Advisory for busybox (FEDORA-2021-5a95823596)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS6.6AI score0.03615EPSS
SaveExploits1References2
OSV
OSV
•added 2021/12/03 11:04 a.m.•11 views

OESA-2021-1449 busybox security update

BusyBox combines tiny versions of many common UNIX utilities into a single small executable. It provides replacements for most of the utilities you usually find in GNU fileutils, shellutils, etc. It provides a fairly complete environment for any small or embedded system. Security Fixes: A...

7.2CVSS7.6AI score0.03087EPSS
SaveExploits0References9
OSV
OSV
•added 2021/12/02 4:49 p.m.•17 views

MGASA-2021-0533 Updated busybox packages fix security vulnerability

A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted shell command, due to missing validation after a \x03 delimiter character. This may be used for DoS under very rare conditions of filtered command input. CVE-2021-42376 An attacker-controlled...

9.8CVSS6.9AI score0.03615EPSS
SaveExploits0References3
Rows per page
Query Builder