Lucene search
+L

2154 matches found

Veracode
Veracode
•added 2024/04/10 11:26 p.m.•33 views

Heap-based Buffer Overflow

busybox is vulnerable to Heap-based Buffer Overflow. The vulnerability arises from the nexttoken function in the awk.c file, allowing attackers to crash the system or gain unauthorized data access with specially crafted inputs...

5.5CVSS6.9AI score0.00412EPSS
SaveExploits1References3Affected Software1
CBLMariner
CBLMariner
•added 2024/03/19 5:21 p.m.•41 views

CVE-2022-28391 affecting package busybox for versions less than 1.36.1-3

CVE-2022-28391 affecting package busybox for versions less than 1.36.1-3. A patched version of the package is available...

8.8CVSS8.7AI score0.03521EPSS
SaveExploits1
Redos
Redos
•added 2024/03/13 12:00 a.m.•44 views

ROS-2-1188

2.1188 BusyBox Denial of Service CVE-2021-28831 1. Vulnerability Description: The vulnerability allows a remote attacker to perform a denial of service DoS attack. The vulnerability exists due to improper handling of the error bit in the huftbuild result pointer in the decopressgunzip.c file. A...

7.5CVSS7AI score0.02719EPSS
SaveExploits0
Redos
Redos
•added 2024/03/13 12:00 a.m.•56 views

ROS-2-461

2.461 BusyBox Denial of Service CVE-2021-28831 1. Vulnerability Description: The vulnerability allows a remote attacker to perform a denial of service DoS attack. The vulnerability exists due to improper handling of the error bit in the huftbuild result pointer in the decopressgunzip.c file. A...

7.5CVSS7AI score0.02719EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2024/03/08 3:17 p.m.•53 views

CVE-2021-42373

A flaw was found in BusyBox where it did not properly sanitize certain page arguments, leading to a denial of service. The highest threat from this vulnerability is to system availability...

5.5CVSS7.1AI score0.00408EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2024/03/04 12:00 a.m.•54 views

openSUSE: Security Advisory for busybox (SUSE-SU-2023:3529-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.03158EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2024/03/04 12:00 a.m.•43 views

openSUSE: Security Advisory for busybox (SUSE-SU-2023:3820-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.6AI score0.03158EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2024/01/16 12:00 a.m.•54 views

EulerOS 2.0 SP9 : busybox (EulerOS-SA-2023-2892)

According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can...

9.8CVSS7.2AI score0.03158EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2024/01/16 12:00 a.m.•43 views

EulerOS 2.0 SP9 : busybox (EulerOS-SA-2023-2873)

According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can...

9.8CVSS7.2AI score0.03158EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2024/01/16 12:00 a.m.•39 views

EulerOS 2.0 SP11 : busybox (EulerOS-SA-2023-3002)

According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can...

9.8CVSS7.2AI score0.03158EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2024/01/16 12:00 a.m.•44 views

EulerOS 2.0 SP11 : busybox (EulerOS-SA-2023-3025)

According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can...

9.8CVSS7.2AI score0.03158EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2024/01/16 12:00 a.m.•42 views

EulerOS 2.0 SP10 : busybox (EulerOS-SA-2023-3201)

According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can...

9.8CVSS7.2AI score0.03158EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2024/01/16 12:00 a.m.•47 views

EulerOS 2.0 SP10 : busybox (EulerOS-SA-2023-3166)

According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can...

9.8CVSS7.2AI score0.03158EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2023/12/01 12:00 a.m.•17 views

The vulnerability of the next_token function in the awk.c file of the UNIX utility command-line tool BusyBox, which allows a hacker to cause a service failure

The vulnerability of the nexttoken function in the BusyBox command-line utility library of UNIX systems is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a system failure...

5.5CVSS6.4AI score0.00412EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/12/01 12:00 a.m.•12 views

The vulnerability of the copyvar function in awk.c in the UNIX utility suite BusyBox, which allows a hacker to cause a service failure

The vulnerability of the copyvar function in the awk.c file of the UNIX utility suite BusyBox relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

5.5CVSS7AI score0.00396EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2023/12/01 12:00 a.m.•21 views

The vulnerability of the `evaluate` function in the UNIX utility commands of the BusyBox, which allows a hacker to cause a service failure

The vulnerability of the evaluate function in the BusyBox command-line utility for UNIX systems is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.6AI score0.00433EPSS
SaveExploits1References5Affected Software2
SUSE CVE
SUSE CVE
•added 2023/11/30 2:04 a.m.•9 views

SUSE CVE-2023-42363

A use-after-free vulnerability was discovered in xasprintf function in xfuncsprintf.c:344 in BusyBox v.1.36.1...

5.5CVSS9.4AI score0.00428EPSS
SaveExploits1References11
SUSE CVE
SUSE CVE
•added 2023/11/30 2:04 a.m.•11 views

SUSE CVE-2023-42364

A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function...

5.5CVSS8.7AI score0.00433EPSS
SaveExploits1References9
SUSE CVE
SUSE CVE
•added 2023/11/30 2:04 a.m.•10 views

SUSE CVE-2023-42365

A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function...

5.5CVSS9.1AI score0.00396EPSS
SaveExploits1References9
SUSE CVE
SUSE CVE
•added 2023/11/30 2:04 a.m.•9 views

SUSE CVE-2023-42366

A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the nexttoken function at awk.c:1159...

5.5CVSS7AI score0.00412EPSS
SaveExploits1References7
Rows per page
Query Builder