SUSE CVE-2017-15874

archival/libarchive/decompressunlzma.c in BusyBox 1.27.2 has an Integer Underflow that leads to a read access violation...

The vulnerability of the `huft_build` function in the `archival/libarchive/decompress_gunzip.c` component of the BusyBox command-line utility suite, related to the manipulation of the null pointer, allows a malicious actor to trigger a denial-of-service attack.

The vulnerability of the huftbuild function in the archival/libarchive/decompressgunzip.c file of the UNIX utility command-line tool BusyBox is related to the use of a null pointer. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created ZIP file...

BusyBox integer overflow vulnerability (CNVD-2017-35513)

BusyBox is a set of applications containing several linux commands and tools maintained by Ukrainian software developer Denis Vlasenko. An integer overflow vulnerability exists in the archival/libarchive/decompressunlzma.c file in BusyBox version 1.27.2. An attacker could exploit this vulnerabili...

PT-2017-4121

Name of the Vulnerable Software and Affected Versions BusyBox version 1.27.2 Description The issue is related to an Integer Overflow in the get next block function, located in the archival/libarchive/decompress bunzip2.c component of BusyBox. This overflow may lead to a write access violation. Th...