EulerOS 2.0 SP9 : busybox (EulerOS-SA-2024-2383)

According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A use-after-free vulnerability was discovered in xasprintf function in xfuncsprintf.c:344 in BusyBox v.1.36.1.CVE-2023-42363 Tenable has extracted...

EulerOS 2.0 SP10 : busybox (EulerOS-SA-2024-2408)

According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A use-after-free vulnerability was discovered in xasprintf function in xfuncsprintf.c:344 in BusyBox v.1.36.1.CVE-2023-42363 Tenable has extracted...

Huawei EulerOS: Security Advisory for busybox (EulerOS-SA-2024-2408)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Netgear R7000 Backup.cgi Heap Overflow Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Netgear R7000 backup.cgi Heap Overflow RCE', 'Description' = %q This module exploits a heap buffer overflow in the genie.cgi?backup.cgi page of...

K000140863: Busybox vulnerability CVE-2022-48174

Security Advisory Description There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution. CVE-2022-48174 Impact There is no impact; F5 products are not affect...

CVE-2023-42364 affecting package busybox for versions less than 1.36.1-7

CVE-2023-42364 affecting package busybox for versions less than 1.36.1-7. A patched version of the package is available...

CVE-2023-42365 affecting package busybox for versions less than 1.36.1-7

CVE-2023-42365 affecting package busybox for versions less than 1.36.1-7. A patched version of the package is available...

CVE-2023-42363 affecting package busybox for versions less than 1.36.1-7

CVE-2023-42363 affecting package busybox for versions less than 1.36.1-7. A patched version of the package is available...

DiCal-RED 4009 Path Traversal

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2024-039 Product: DiCal-RED Manufacturer: Swissphone Wireless AG Affected Versions: Unknown Tested Versions: 4009 Vulnerability Type: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' CWE-22 Risk Level:...

CBL Mariner 2.0 Security Update: busybox (CVE-2023-42365)

The version of busybox installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-42365 advisory. - A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c...

CBL Mariner 2.0 Security Update: busybox (CVE-2023-42363)

The version of busybox installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-42363 advisory. - A use-after-free vulnerability was discovered in xasprintf function in xfuncsprintf.c:344 in BusyBox...

CVE-2023-42365 affecting package busybox for versions less than 1.35.0-11

CVE-2023-42365 affecting package busybox for versions less than 1.35.0-11. A patched version of the package is available...

CVE-2023-42364 affecting package busybox for versions less than 1.35.0-11

CVE-2023-42364 affecting package busybox for versions less than 1.35.0-11. A patched version of the package is available...

CVE-2023-42363 affecting package busybox for versions less than 1.35.0-11

CVE-2023-42363 affecting package busybox for versions less than 1.35.0-11. A patched version of the package is available...

CVE-2023-42365

...

CVE-2023-42363

...

Ubuntu: Security Advisory (USN-6961-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6961-1 busybox vulnerabilities

It was discovered that BusyBox did not properly validate user input when performing certain arithmetic operations. If a user or automated system were tricked into processing a specially crafted file, an attacker could possibly use this issue to cause a denial of service, or execute arbitrary code...

USN-6961-1: BusyBox vulnerabilities

It was discovered that BusyBox did not properly validate user input when performing certain arithmetic operations. If a user or automated system were tricked into processing a specially crafted file, an attacker could possibly use this issue to cause a denial of service, or execute arbitrary code...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : BusyBox vulnerabilities (USN-6961-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6961-1 advisory. It was discovered that BusyBox did not properly validate user input when performing certain arithmetic operations. If a user or...