GHSA-GQ73-RH3M-3PHP vulnerabilities

Vulnerabilities for packages: busybox...

GHSA-H8C3-8522-VXC6 vulnerabilities

Vulnerabilities for packages: busybox...

There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.

...

CBL Mariner 2.0 Security Update: busybox (CVE-2022-48174)

The version of busybox installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-48174 advisory. - There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Interne...

CVE-2022-48174 affecting package busybox for versions less than 1.35.0-13

CVE-2022-48174 affecting package busybox for versions less than 1.35.0-13. A patched version of the package is available...

Stack overflow vulnerability in ash.c:6030 in busybox before 1.35 can be executed from command to arbitrary code execution.

BusyBox is vulnerable to memory corruption due to improper validation of user-supplied input. An attacker could exploit this to corrupt memory by tricking a victim into processing a crafted file to cause a stack-based buffer overflow. Further impacts may include serious confidentiality, integrity...

BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record

BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors...

Astra Linux – Vulnerability in busybox

A use-after-free vulnerability was discovered in the xasprintf function in xfuncsprintf.c:344 of BusyBox v.1.36.1...

Astra Linux – Vulnerability in busybox

A use-after-free vulnerability exists in BusyBox v.1.36.1. Attackers can cause a denial of service by using a crafted awk pattern in the awk.c evaluate function...

Astra Linux – Vulnerability in busybox

A use-after-free vulnerability was discovered in BusyBox v.1.36.1 through a malicious awk pattern in the awk.c copyvar function...

EulerOS 2.0 SP11 : busybox (EulerOS-SA-2025-1150)

According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.CVE-2023-42365 A...

Huawei EulerOS: Security Advisory for busybox (EulerOS-SA-2025-1185)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for busybox (EulerOS-SA-2025-1150)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Azure Linux 3.0 Security Update: busybox (CVE-2023-42363)

The version of busybox installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-42363 advisory. - A use-after-free vulnerability was discovered in xasprintf function in xfuncsprintf.c:344 in BusyBox...

Huawei EulerOS: Security Advisory for busybox (EulerOS-SA-2025-1169)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP12 : busybox (EulerOS-SA-2025-1169)

According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate...

Azure Linux 3.0 Security Update: busybox (CVE-2023-42365)

The version of busybox installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-42365 advisory. - A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c...

EulerOS 2.0 SP12 : busybox (EulerOS-SA-2025-1185)

According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate...

EulerOS 2.0 SP11 : busybox (EulerOS-SA-2025-1131)

According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.CVE-2023-42365 A...

Debian: Security Advisory (DLA-4019-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...