Lucene search
+L

20 matches found

osv_opensuse
osv_opensuse
•added 2026/10/06 4:10 p.m.•10 views

OPENSUSE-SU-2026:22040-1 Security update for busybox

This update for busybox fixes the following issues: - CVE-2023-42366: heap-buffer-overflow in the nexttoken function bsc1217586. - CVE-2026-38752: Denial of Service via crafted AWK script bsc1271544. - CVE-2026-38753: use-after-free in awksub bsc1271545. - CVE-2026-38754: heap overflow in...

7.5CVSS6.6AI score0.00412EPSS
SaveExploits1References10
osv_oesa
osv_oesa
•added 2026/08/07 2:47 a.m.•36 views

OESA-2026-3312 busybox security update

The Swiss Army Knife of Embedded Linux Security Fixes: A stack overflow in the evaluate function editors/awk.c of BusyBox commit 371fe9 allows attackers to cause a Denial of Service DoS via supplying a crafted AWK script.CVE-2026-38752 A use-after-free in the awksub function editors/awk.c of...

5.1CVSS6.3AI score0.00235EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/07/20 3:17 p.m.•24 views

busybox: Busybox: Denial of Service via heap overflow in evalcommand() function

A flaw was found in Busybox. A heap overflow vulnerability in the evalcommand function allows attackers to cause a Denial of Service DoS by supplying a specially crafted input. This can lead to the unavailability of the service...

7.5CVSS5.8AI score0.00207EPSS
SaveExploits0References6
Microsoft CVE
Microsoft CVE
•added 2026/07/19 8:02 a.m.•31 views

A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.

...

7.5CVSS5.8AI score0.00207EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/07/17 4:19 a.m.•27 views

CVE-2026-38755

A flaw was found in Busybox. A heap overflow vulnerability in the evalcommand function allows attackers to cause a Denial of Service DoS by supplying a specially crafted input. This can lead to the unavailability of the service. Mitigation Mitigation for this issue is either not available or the...

7.5CVSS5.9AI score0.00207EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2026/07/16 6:03 p.m.•22 views

SUSE CVE-2026-38755

A heap overflow in the evalcommand function shell/ash.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted input...

3.3CVSS6AI score0.00207EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/07/16 12:31 a.m.•32 views

EUVD-2026-44851

A heap overflow in the evalcommand function shell/ash.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted input...

7.5CVSS6AI score0.00207EPSS
SaveExploits0References3
osv_azl
osv_azl
•added 2026/07/15 10:16 p.m.•19 views

AZL-92487 CVE-2026-38755 affecting package busybox for versions less than 1.36.1-26

A heap overflow in the evalcommand function shell/ash.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted input...

7.5CVSS6AI score0.00207EPSS
SaveExploits0References1
NVD
NVD
•added 2026/07/15 10:16 p.m.•29 views

CVE-2026-38755

A heap overflow in the evalcommand function shell/ash.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted input...

7.5CVSS0.00207EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2026/07/15 10:16 p.m.•22 views

UBUNTU-CVE-2026-38755

A heap overflow in the evalcommand function shell/ash.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted input...

7.5CVSS6AI score0.00207EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/07/15 10:16 p.m.•30 views

CVE-2026-38755

A heap overflow in the evalcommand function shell/ash.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted input...

7.5CVSS6AI score0.00207EPSS
SaveExploits0References1
Mend
Mend
•added 2026/07/15 12:00 a.m.•8 views

CVE-2026-38755

A heap overflow in the evalcommand function shell/ash.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted input...

7.5CVSS6AI score0.00207EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/07/15 12:00 a.m.•28 views

CVE-2026-38755

A heap overflow in the evalcommand function shell/ash.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted input...

7.5CVSS6AI score0.00207EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/07/15 12:00 a.m.•31 views

PT-2026-60314

Name of the Vulnerable Software and Affected Versions Busybox version 1.38.0 Description A heap overflow occurs in the evalcommand function shell/ash.c, which can be triggered by providing crafted input, leading to a Denial of Service DoS. A heap overflow is a memory corruption issue where a...

7.5CVSS6.3AI score0.00235EPSS
SaveExploits0References38
attackerkb
attackerkb
•added 2026/07/15 12:00 a.m.•23 views

CVE-2026-38755

A heap overflow in the evalcommand function shell/ash.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted input...

6AI score0.00207EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/07/15 12:00 a.m.•83 views

CVE-2026-38755

A heap overflow in the evalcommand function shell/ash.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted input...

2.9CVSS0.00207EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/15 12:00 a.m.•7 views

CVE-2026-38755: Uncontrolled Recursion

A heap overflow in the evalcommand function shell/ash.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted input...

7.5CVSS6AI score0.00207EPSS
SaveExploits0References4
CVE
CVE
•added 2026/07/15 12:00 a.m.•121 views

CVE-2026-38755

A heap overflow exists in the evalcommand() function (located in shell/ash.c ) of Busybox v1.38.0 . This vulnerability allows an attacker to trigger a Denial of Service (DoS) by providing crafted input . While some sources indicate a lack of a vendor-supplied patch, other records suggest that a p...

7.5CVSS6AI score0.00207EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/07/15 12:00 a.m.•21 views

CVE-2026-38755

A heap overflow in the evalcommand function shell/ash.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted input...

6AI score0.00207EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
•added 2026/07/15 12:00 a.m.•40 views

CVE-2026-38755

A heap overflow in the evalcommand function shell/ash.c of Busybox v1.38.0 allows attackers to cause a Denial of Service DoS via supplying a crafted input...

7.5CVSS6AI score0.00207EPSS
SaveExploits0References3
Rows per page
Query Builder