550 matches found
busybox: busybox: dpkg read_package_field() steps past NUL terminator, causing out-of-bounds read on malformed .deb packages
BusyBox dpkg readpackagefield steps past a NUL terminator on malformed .deb packages, causing an out-of-bounds heap read...
Linux Distros Unpatched Vulnerability : CVE-2026-88835
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BusyBox dpkg readpackagefield steps past a NUL terminator on malformed .deb packages, causing an out- of-bounds heap read. CVE-2026-88835 Note that Nessus relie...
SUSE CVE-2026-88835
BusyBox dpkg readpackagefield steps past a NUL terminator on malformed .deb packages, causing an out-of-bounds heap read...
CVE-2026-88841
BusyBox dpkg writestatusfile does not reset a stale field cursor between package stanzas, causing out-of-bounds reads and status file corruption when removing multiple packages. Mitigation Do not use the BusyBox dpkg applet for package management on systems where package integrity is critical...
CVE-2026-88835
BusyBox dpkg readpackagefield steps past a NUL terminator on malformed .deb packages, causing an out-of-bounds heap read...
DEBIAN-CVE-2026-88835
BusyBox dpkg readpackagefield steps past a NUL terminator on malformed .deb packages, causing an out-of-bounds heap read...
UBUNTU-CVE-2026-88835
BusyBox dpkg readpackagefield steps past a NUL terminator on malformed .deb packages, causing an out-of-bounds heap read...
CVE-2026-88835
BusyBox dpkg readpackagefield steps past a NUL terminator on malformed .deb packages, causing an out-of-bounds heap read...
CVE-2026-88835 Busybox: busybox: dpkg read_package_field() steps past nul terminator, causing out-of-bounds read on malformed .deb packages
BusyBox dpkg readpackagefield steps past a NUL terminator on malformed .deb packages, causing an out-of-bounds heap read...
CVE-2026-88835 Busybox: busybox: dpkg read_package_field() steps past nul terminator, causing out-of-bounds read on malformed .deb packages
BusyBox dpkg readpackagefield steps past a NUL terminator on malformed .deb packages, causing an out-of-bounds heap read...
CVE-2026-88835
BusyBox dpkg readpackagefield steps past a NUL terminator on malformed .deb packages, causing an out-of-bounds heap read...
EUVD-2026-85510
BusyBox dpkg readpackagefield steps past a NUL terminator on malformed .deb packages, causing an out-of-bounds heap read...
CVE-2026-88835
The BusyBox dpkg utility contains a vulnerability in the read_package_field() function. When processing malformed .deb packages , the function steps past a NUL terminator , resulting in an out-of-bounds heap read . The practical impact of this flaw is an out-of-bounds read, and the CVSS3.1 score ...
CVE-2026-88835
BusyBox dpkg readpackagefield steps past a NUL terminator on malformed .deb packages, causing an out-of-bounds heap read. Mitigation Do not use the BusyBox dpkg applet to process untrusted .deb packages. Use the full dpkg implementation if Debian package handling is needed...
PT-2026-97427
Name of the Vulnerable Software and Affected Versions BusyBox affected versions not specified Description The read package field function in the dpkg utility fails to properly handle NUL terminators when processing malformed .deb packages. This leads to an out-of-bounds heap read, which occurs wh...
Astra Linux – Vulnerability in dpkg
In dpkg, the Debian package management system, versions prior to 1.21.8, 1.20.10, 1.19.8, and 1.18.26 are vulnerable to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include debian.tar, the in-place extraction process may...
Debian dla-4673 : dpkg - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4673 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4673-1 [email protected] https://www.debian.org/lts/security/...
openSUSE 16 Security Update : dpkg (openSUSE-SU-2026:20909-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20909-1 advisory. This update for dpkg fixes the following issue: - CVE-2026-2219: dpkg-deb: malformed .deb archives can cause a denial of service bsc1259385. Tenable has...
Security update for dpkg (moderate)
openSUSE security update: security update for dpkg ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20909-1 Rating: moderate References: bsc1259385 Cross-References: CVE-2026-2219 CVSS scores: CVE-2026-2219 SUSE : 6.5...