Linux Distros Unpatched Vulnerability : CVE-2021-42385

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function...

Linux Distros Unpatched Vulnerability : CVE-2018-1000500

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Busybox contains a Missing SSL certificate validation vulnerability in The busybox wget applet that can result in arbitrary code execution. This attack appear t...

OESA-2025-1886 busybox security update

BusyBox combines tiny versions of many common UNIX utilities into a single small executable. It provides replacements for most of the utilities you usually find in GNU fileutils, shellutils, etc. It provides a fairly complete environment for any small or embedded system. Security Fixes: An issue ...

OESA-2025-1881 busybox security update

BusyBox combines tiny versions of many common UNIX utilities into a single small executable. It provides replacements for most of the utilities you usually find in GNU fileutils, shellutils, etc. It provides a fairly complete environment for any small or embedded system. Security Fixes: In tar in...

OESA-2025-1885 busybox security update

BusyBox combines tiny versions of many common UNIX utilities into a single small executable. It provides replacements for most of the utilities you usually find in GNU fileutils, shellutils, etc. It provides a fairly complete environment for any small or embedded system. Security Fixes: An issue ...

OESA-2025-1882 busybox security update

BusyBox combines tiny versions of many common UNIX utilities into a single small executable. It provides replacements for most of the utilities you usually find in GNU fileutils, shellutils, etc. It provides a fairly complete environment for any small or embedded system. Security Fixes: In tar in...

OESA-2025-1884 busybox security update

BusyBox combines tiny versions of many common UNIX utilities into a single small executable. It provides replacements for most of the utilities you usually find in GNU fileutils, shellutils, etc. It provides a fairly complete environment for any small or embedded system. Security Fixes: An issue ...

OESA-2025-1883 busybox security update

BusyBox combines tiny versions of many common UNIX utilities into a single small executable. It provides replacements for most of the utilities you usually find in GNU fileutils, shellutils, etc. It provides a fairly complete environment for any small or embedded system. Security Fixes: In tar in...

K000152680: BusyBox vulnerability CVE-2024-58251

Security Advisory Description In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv0 containing an ANSI terminal escape sequence, leading to a denial of service terminal locked up when netstat is used by a victim. CVE-2024-58251 Impact Attackers can laun...

K000152678: BusyBox vulnerability CVE-2025-46394

Security Advisory Description In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences. CVE-2025-46394 Impact An attacker could exploit this vulnerability by creating a TAR archive containing malicious files with names...

busybox-1.37.0-5.1 on GA media (moderate)

busybox-1.37.0-5.1 on GA media Announcement ID: openSUSE-SU-2025:15361-1 Rating: moderate Cross-References: CVE-2023-42363 CVE-2023-42364 CVE-2023-42365 CVSS scores: CVE-2023-42363 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2023-42364 SUSE : 5.5...

OPENSUSE-SU-2025:15361-1 busybox-1.37.0-5.1 on GA media

These are all security issues fixed in the busybox-1.37.0-5.1 package on the GA media of openSUSE Tumbleweed...

OESA-2025-1856 busybox security update

BusyBox combines tiny versions of many common UNIX utilities into a single small executable. It provides replacements for most of the utilities you usually find in GNU fileutils, shellutils, etc. It provides a fairly complete environment for any small or embedded system. Security Fixes: An issue ...

OESA-2025-1855 busybox security update

BusyBox combines tiny versions of many common UNIX utilities into a single small executable. It provides replacements for most of the utilities you usually find in GNU fileutils, shellutils, etc. It provides a fairly complete environment for any small or embedded system. Security Fixes: An issue ...

OESA-2025-1857 busybox security update

BusyBox combines tiny versions of many common UNIX utilities into a single small executable. It provides replacements for most of the utilities you usually find in GNU fileutils, shellutils, etc. It provides a fairly complete environment for any small or embedded system. Security Fixes: An issue ...

Azure Linux 3.0 Security Update: busybox (CVE-2022-48174)

The version of busybox installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-48174 advisory. - There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Interne...

CVE-2022-48174 affecting package busybox for versions less than 1.36.1-14

CVE-2022-48174 affecting package busybox for versions less than 1.36.1-14. A patched version of the package is available...

K000152311: Busybox vulnerabilities CVE-2022-28391 and CVE-2022-30065

Security Advisory Description CVE-2022-28391 BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors. CVE-2022-30065 A...

The vulnerability of the `evaluate` function in the BusyBox command-line utility set allows a hacker to cause a service failure.

The vulnerability of the evaluate function in the BusyBox command-line utilities is related to an incorrect use after its initialization. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability in the command-line utility BusyBox, related to the assignment of the zero pointer, allows a hacker to trigger a service failure.

The vulnerability of the BusyBox command-line utility set is related to a pointer assignment error. Exploiting this vulnerability could allow an attacker to cause a service failure...