1848 matches found
The vulnerability of the `strip_unsafe_prefix()` function in the UNIX utility commands of the BusyBox, which allows a hacker to cause a service failure
The vulnerability of the stripunsafeprefix function in the UNIX command-line utility set of BusyBox is related to external control via a name or file path. Exploiting this vulnerability could allow an attacker to cause a service failure...
CLEANSTART-2026-AG84392 Security fixes in busybox 1.36.1-r2
Package busybox version 1.36.1-r2 fixes 1 vulnerabilities: CVE-2022-48174...
CLEANSTART-2026-SU97582 Security fixes in busybox 1.36.1-r25
Package busybox version 1.36.1-r25 fixes 1 vulnerabilities: CVE-2023-42366...
CVE-2026-38755 affecting package busybox for versions less than 1.36.1-25
CVE-2026-38755 affecting package busybox for versions less than 1.36.1-25. A patched version of the package is available...
CVE-2026-38754 affecting package busybox for versions less than 1.36.1-25
CVE-2026-38754 affecting package busybox for versions less than 1.36.1-25. A patched version of the package is available...
A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script.
...
A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script.
...
busybox: BusyBox: Denial of Service via crafted AWK script
A flaw was found in BusyBox. This vulnerability, a stack overflow in the evaluate function, allows a remote attacker to cause a Denial of Service DoS by providing a specially crafted AWK script. A Denial of Service attack can make the affected system or application unavailable to legitimate users...
busybox: Busybox: Denial of Service via heap overflow in evalcommand() function
A flaw was found in Busybox. A heap overflow vulnerability in the evalcommand function allows attackers to cause a Denial of Service DoS by supplying a specially crafted input. This can lead to the unavailability of the service...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: busybox: busybox-1.37.0-8.2.hum1 aarch64, x8664 busybox-petitboot-1.37.0-8.2.hum1 aarch64, x8664 busybox-shared-1.37.0-8.2.hum1 aarch64, x8664 busybox-1.37.0-8.2.hum1.src src Security Fixes:...
A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.
...
A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.
...
CVE-2026-38755
A flaw was found in Busybox. A heap overflow vulnerability in the evalcommand function allows attackers to cause a Denial of Service DoS by supplying a specially crafted input. This can lead to the unavailability of the service. Mitigation Mitigation for this issue is either not available or the...
CVE-2026-38752
A flaw was found in BusyBox. This vulnerability, a stack overflow in the evaluate function, allows a remote attacker to cause a Denial of Service DoS by providing a specially crafted AWK script. A Denial of Service attack can make the affected system or application unavailable to legitimate users...
busybox: Busybox: Denial of Service via crafted AWK script in awk_sub() function
A flaw was found in Busybox. A use-after-free vulnerability in the awksub function allows a remote attacker to cause a Denial of Service DoS by supplying a specially crafted AWK script. This can lead to the unavailability of the Busybox service...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: busybox: busybox-1.37.0-8.1.hum1 aarch64, x8664 busybox-petitboot-1.37.0-8.1.hum1 aarch64, x8664 busybox-shared-1.37.0-8.1.hum1 aarch64, x8664 busybox-1.37.0-8.1.hum1.src src Security Fixes:...
busybox: Busybox: Denial of Service via heap overflow in ifsbreakup() function
A flaw was found in Busybox. This vulnerability, a heap overflow, exists within the ifsbreakup function. A remote attacker could exploit this by providing specially crafted input, leading to a Denial of Service DoS condition. This means the affected system or application could become unavailable ...
SUSE CVE-2026-38752
A stack overflow in the evaluate function editors/awk.c of BusyBox commit 371fe9 allows attackers to cause a Denial of Service DoS via supplying a crafted AWK script...