SUSE CVE-2017-16544

In the addmatch function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of filenames in a directory, does not sanitize filenames and results in executing any escape sequence in the terminal. This could potentially result in code...

The vulnerability of the `add_match` function in the `libbb/lineedit.c` component of the UNIX utility commands in BusyBox, related to a lack of mechanism for managing code generation, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the addmatch function in the libbb/lineedit.c component of the UNIX utility commands in BusyBox is related to the lack of file name filtering. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service...

BusyBox Arbitrary Code Execution Vulnerability

BusyBox is a set of applications containing several linux commands and tools maintained by Ukrainian software developer Denis Vlasenko. A security vulnerability in the 'addmatch' function in the libbb/lineedit.c file in BusyBox 1.27.2 and earlier versions, which stems from the program's failure t...

CVE-2017-16544

In the addmatch function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of filenames in a directory, does not sanitize filenames and results in executing any escape sequence in the terminal. This could potentially result in code...

CVE-2017-16544: Improper Control of Generation of Code

In the addmatch function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of filenames in a directory, does not sanitize filenames and results in executing any escape sequence in the terminal. This could potentially result in code...