Linux Distros Unpatched Vulnerability : CVE-2023-39810

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal. CVE-2023-39810 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2022-30065

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar...

Linux Distros Unpatched Vulnerability : CVE-2017-15873

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The getnextblock function in archival/libarchive/decompressbunzip2.c in BusyBox 1.27.2 has an Integer Overflow that may lead to a write access violation...

Linux Distros Unpatched Vulnerability : CVE-2016-2148

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in the DHCP client udhcpc in BusyBox before 1.25.0 allows remote attackers to have unspecified impact via vectors involving OPTION6RD...

Linux Distros Unpatched Vulnerability : CVE-2017-16544

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the addmatch function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of filenames in a director...

Linux Distros Unpatched Vulnerability : CVE-2016-2147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the DHCP client udhcpc in BusyBox before 1.25.0 allows remote attackers to cause a denial of service crash via a malformed RFC1035-encoded...

Linux Distros Unpatched Vulnerability : CVE-2014-9645

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The addprobe function in modutils/modprobe.c in BusyBox before 1.23.0 allows local users to bypass intended restrictions on loading kernel modules via a / slash...

Linux Distros Unpatched Vulnerability : CVE-2015-9261

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - huftbuild in archival/libarchive/decompressgunzip.c in BusyBox before 1.27.2 misuses a pointer, causing segfaults and an application crash during an unzip...

GHSA-GQ73-RH3M-3PHP vulnerabilities

Vulnerabilities for packages: busybox...

GHSA-H8C3-8522-VXC6 vulnerabilities

Vulnerabilities for packages: busybox...

GHSA-GQ73-RH3M-3PHP vulnerabilities

Vulnerabilities for packages: busybox...

GHSA-H8C3-8522-VXC6 vulnerabilities

Vulnerabilities for packages: busybox...

There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.

...

CBL Mariner 2.0 Security Update: busybox (CVE-2022-48174)

The version of busybox installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-48174 advisory. - There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Interne...

CVE-2022-48174 affecting package busybox for versions less than 1.35.0-13

CVE-2022-48174 affecting package busybox for versions less than 1.35.0-13. A patched version of the package is available...

BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record

BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors...

Stack overflow vulnerability in ash.c:6030 in busybox before 1.35 can be executed from command to arbitrary code execution.

BusyBox is vulnerable to memory corruption due to improper validation of user-supplied input. An attacker could exploit this to corrupt memory by tricking a victim into processing a crafted file to cause a stack-based buffer overflow. Further impacts may include serious confidentiality, integrity...

Astra Linux – Vulnerability in busybox

A use-after-free vulnerability was discovered in the xasprintf function in xfuncsprintf.c:344 of BusyBox v.1.36.1...

Azure Linux 3.0 Security Update: busybox (CVE-2023-42363)

The version of busybox installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-42363 advisory. - A use-after-free vulnerability was discovered in xasprintf function in xfuncsprintf.c:344 in BusyBox...

Azure Linux 3.0 Security Update: busybox (CVE-2023-42365)

The version of busybox installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-42365 advisory. - A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c...