K000152680: BusyBox vulnerability CVE-2024-58251

Security Advisory Description In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv0 containing an ANSI terminal escape sequence, leading to a denial of service terminal locked up when netstat is used by a victim. CVE-2024-58251 Impact Attackers can laun...

K000152678: BusyBox vulnerability CVE-2025-46394

Security Advisory Description In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences. CVE-2025-46394 Impact An attacker could exploit this vulnerability by creating a TAR archive containing malicious files with names...

busybox-1.37.0-5.1 on GA media (moderate)

busybox-1.37.0-5.1 on GA media Announcement ID: openSUSE-SU-2025:15361-1 Rating: moderate Cross-References: CVE-2023-42363 CVE-2023-42364 CVE-2023-42365 CVSS scores: CVE-2023-42363 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2023-42364 SUSE : 5.5...

OPENSUSE-SU-2025:15361-1 busybox-1.37.0-5.1 on GA media

These are all security issues fixed in the busybox-1.37.0-5.1 package on the GA media of openSUSE Tumbleweed...

OESA-2025-1856 busybox security update

BusyBox combines tiny versions of many common UNIX utilities into a single small executable. It provides replacements for most of the utilities you usually find in GNU fileutils, shellutils, etc. It provides a fairly complete environment for any small or embedded system. Security Fixes: An issue ...

OESA-2025-1855 busybox security update

BusyBox combines tiny versions of many common UNIX utilities into a single small executable. It provides replacements for most of the utilities you usually find in GNU fileutils, shellutils, etc. It provides a fairly complete environment for any small or embedded system. Security Fixes: An issue ...

OESA-2025-1857 busybox security update

BusyBox combines tiny versions of many common UNIX utilities into a single small executable. It provides replacements for most of the utilities you usually find in GNU fileutils, shellutils, etc. It provides a fairly complete environment for any small or embedded system. Security Fixes: An issue ...

Azure Linux 3.0 Security Update: busybox (CVE-2022-48174)

The version of busybox installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-48174 advisory. - There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Interne...

CVE-2022-48174 affecting package busybox for versions less than 1.36.1-14

CVE-2022-48174 affecting package busybox for versions less than 1.36.1-14. A patched version of the package is available...

K000152311: Busybox vulnerabilities CVE-2022-28391 and CVE-2022-30065

Security Advisory Description CVE-2022-28391 BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors. CVE-2022-30065 A...

The vulnerability in the command-line utility BusyBox, related to the assignment of the zero pointer, allows a hacker to trigger a service failure.

The vulnerability of the BusyBox command-line utility set is related to a pointer assignment error. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `evaluate` function in the BusyBox command-line utility set allows a hacker to cause a service failure.

The vulnerability of the evaluate function in the BusyBox command-line utilities is related to an incorrect use after its initialization. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability in the command-line utility BusyBox, related to the assignment of the zero pointer, allows a hacker to trigger a service failure.

The vulnerability of the BusyBox command-line utility set is related to a pointer assignment error. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the command-line utility BusyBox, related to the release of an incorrect pointer, allows a hacker to execute arbitrary code.

The vulnerability of the BusyBox command-line utility set is related to the release of an incorrect pointer. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability in the command-line utility BusyBox, related to improper input validation, allows a hacker to trigger a service failure.

The vulnerability of the BusyBox command-line utility set is related to improper validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2021-37555

TX9 Automatic Food Dispenser v3.2.57 devices allow access to a shell as root/superuser, a related issue to CVE-2019-16734. To connect, the telnet service is used on port 23 with the default password of 059AnkJ for the root account. The user can then download the filesystem through preinstalled...

CVE-2019-13473

TELESTAR Bobs Rock Radio, Dabman D10, Dabman i30 Stereo, Imperial i110, Imperial i150, Imperial i200, Imperial i200-cd, Imperial i400, Imperial i450, Imperial i500-bt, and Imperial i600 TN81HH96-g102h-g102 devices have an undocumented TELNET service within the BusyBox subsystem, leading to root...

PT-2025-25781

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel's MCTP implementation has been resolved. The issue occurs in the mctp dump addrinfo function when ifa index is accessed without proper initialization,...

Azure Linux 3.0 Security Update: busybox (CVE-2023-39810)

The version of busybox installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-39810 advisory. - An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal...

CBL Mariner 2.0 Security Update: busybox (CVE-2023-39810)

The version of busybox installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-39810 advisory. - An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal...