1835 matches found
Huawei EulerOS: Security Advisory for busybox (EulerOS-SA-2024-2358)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP10 : busybox (EulerOS-SA-2024-2408)
According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A use-after-free vulnerability was discovered in xasprintf function in xfuncsprintf.c:344 in BusyBox v.1.36.1.CVE-2023-42363 Tenable has extracted...
EulerOS 2.0 SP9 : busybox (EulerOS-SA-2024-2383)
According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A use-after-free vulnerability was discovered in xasprintf function in xfuncsprintf.c:344 in BusyBox v.1.36.1.CVE-2023-42363 Tenable has extracted...
Huawei EulerOS: Security Advisory for busybox (EulerOS-SA-2024-2408)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Netgear R7000 Backup.cgi Heap Overflow Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Netgear R7000 backup.cgi Heap Overflow RCE', 'Description' = %q This module exploits a heap buffer overflow in the genie.cgi?backup.cgi page of...
K000140863: Busybox vulnerability CVE-2022-48174
Security Advisory Description There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution. CVE-2022-48174 Impact There is no impact; F5 products are not affect...
CVE-2023-42364 affecting package busybox for versions less than 1.36.1-7
CVE-2023-42364 affecting package busybox for versions less than 1.36.1-7. A patched version of the package is available...
CVE-2023-42365 affecting package busybox for versions less than 1.36.1-7
CVE-2023-42365 affecting package busybox for versions less than 1.36.1-7. A patched version of the package is available...
CVE-2023-42363 affecting package busybox for versions less than 1.36.1-7
CVE-2023-42363 affecting package busybox for versions less than 1.36.1-7. A patched version of the package is available...
DiCal-RED 4009 Path Traversal
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2024-039 Product: DiCal-RED Manufacturer: Swissphone Wireless AG Affected Versions: Unknown Tested Versions: 4009 Vulnerability Type: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' CWE-22 Risk Level:...
CBL Mariner 2.0 Security Update: busybox (CVE-2023-42365)
The version of busybox installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-42365 advisory. - A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c...
CBL Mariner 2.0 Security Update: busybox (CVE-2023-42363)
The version of busybox installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-42363 advisory. - A use-after-free vulnerability was discovered in xasprintf function in xfuncsprintf.c:344 in BusyBox...
CVE-2023-42365 affecting package busybox for versions less than 1.35.0-11
CVE-2023-42365 affecting package busybox for versions less than 1.35.0-11. A patched version of the package is available...
CVE-2023-42364 affecting package busybox for versions less than 1.35.0-11
CVE-2023-42364 affecting package busybox for versions less than 1.35.0-11. A patched version of the package is available...
CVE-2023-42363 affecting package busybox for versions less than 1.35.0-11
CVE-2023-42363 affecting package busybox for versions less than 1.35.0-11. A patched version of the package is available...
CVE-2023-42365
...
CVE-2023-42363
...
Ubuntu: Security Advisory (USN-6961-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-6961-1 busybox vulnerabilities
It was discovered that BusyBox did not properly validate user input when performing certain arithmetic operations. If a user or automated system were tricked into processing a specially crafted file, an attacker could possibly use this issue to cause a denial of service, or execute arbitrary code...
USN-6961-1: BusyBox vulnerabilities
It was discovered that BusyBox did not properly validate user input when performing certain arithmetic operations. If a user or automated system were tricked into processing a specially crafted file, an attacker could possibly use this issue to cause a denial of service, or execute arbitrary code...