Lucene search
K

3 matches found

BDU FSTEC
BDU FSTEC
added 2021/07/02 12:0 a.m.2 views

The vulnerability of the `add_match` function in the `libbb/lineedit.c` component of the UNIX utility commands in BusyBox, related to a lack of mechanism for managing code generation, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the addmatch function in the libbb/lineedit.c component of the UNIX utility commands in BusyBox is related to the lack of file name filtering. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service...

8.8CVSS6.6AI score0.01212EPSS
Exploits12References7Affected Software3
CNVD
CNVD
added 2017/11/21 12:0 a.m.4 views

BusyBox Arbitrary Code Execution Vulnerability

BusyBox is a set of applications containing several linux commands and tools maintained by Ukrainian software developer Denis Vlasenko. A security vulnerability in the 'addmatch' function in the libbb/lineedit.c file in BusyBox 1.27.2 and earlier versions, which stems from the program's failure t...

8.8CVSS7.6AI score0.01212EPSS
Exploits12References1
OSV
OSV
added 2017/11/20 3:29 p.m.0 views

DEBIAN-CVE-2017-16544

In the addmatch function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of filenames in a directory, does not sanitize filenames and results in executing any escape sequence in the terminal. This could potentially result in code...

8.8CVSS6.8AI score0.01212EPSS
Exploits12References1
Rows per page
Query Builder