Lucene search
K

15 matches found

Tenable Nessus
Tenable Nessus
added 2023/03/20 12:0 a.m.46 views

CBL Mariner 2.0 Security Update: busybox (CVE-2021-42374)

The version of busybox installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-42374 advisory. - An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when...

5.3CVSS6.9AI score0.00064EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2022/02/26 12:0 a.m.21 views

Huawei EulerOS: Security Advisory for busybox (EulerOS-SA-2022-1238)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS7AI score0.00064EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2022/02/25 12:0 a.m.35 views

EulerOS 2.0 SP10 : busybox (EulerOS-SA-2022-1250)

According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is...

5.3CVSS6.9AI score0.00064EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2022/02/25 12:0 a.m.33 views

EulerOS 2.0 SP10 : busybox (EulerOS-SA-2022-1238)

According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is...

5.3CVSS6.9AI score0.00064EPSS
Exploits1References2
OSV
OSV
added 2021/11/15 9:15 p.m.25 views

CVE-2021-42374

An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that...

5.3CVSS6.6AI score
Exploits0References6
CVE
CVE
added 2021/11/15 12:0 a.m.169 views

CVE-2021-42374

CVE-2021-42374 is an out-of-bounds heap read in BusyBox’s unlzma applet that can lead to information leakage and denial of service when decompressing crafted LZMA input. Connected sources confirm impact on BusyBox broadly (unlzma) across multiple distributions and variants (e.g., Debian/BusyBox a...

5.3CVSS5.9AI score0.00064EPSS
Exploits1References6Affected Software1
Cvelist
Cvelist
added 2021/11/15 12:0 a.m.21 views

CVE-2021-42374

An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that...

6.3AI score0.00064EPSS
Exploits1References5
AlpineLinux
AlpineLinux
added 2021/11/15 12:0 a.m.37 views

CVE-2021-42374

An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that...

5.3CVSS6.2AI score0.00064EPSS
Exploits1
Prion
Prion
added 2017/12/05 4:29 p.m.12 views

Code injection

The most package in Debian wheezy before 5.0.0a-2.2, in Debian jessie before 5.0.0a-2.3+deb8u1, and in Debian unstable before 5.0.0a-3 allows remote attackers to execute arbitrary commands via shell metacharacters in the name of an LZMA-compressed file...

10CVSS8.1AI score0.13545EPSS
Exploits0References4Affected Software1
UbuntuCve
UbuntuCve
added 2017/12/05 4:29 p.m.17 views

CVE-2016-1253

The most package in Debian wheezy before 5.0.0a-2.2, in Debian jessie before 5.0.0a-2.3+deb8u1, and in Debian unstable before 5.0.0a-3 allows remote attackers to execute arbitrary commands via shell metacharacters in the name of an LZMA-compressed file...

10CVSS7.5AI score0.13545EPSS
Exploits0References2
OSV
OSV
added 2017/12/05 4:29 p.m.4 views

CVE-2016-1253

The most package in Debian wheezy before 5.0.0a-2.2, in Debian jessie before 5.0.0a-2.3+deb8u1, and in Debian unstable before 5.0.0a-3 allows remote attackers to execute arbitrary commands via shell metacharacters in the name of an LZMA-compressed file...

9.8CVSS9.8AI score
Exploits0References4
Debian CVE
Debian CVE
added 2017/12/05 4:0 p.m.21 views

CVE-2016-1253

The most package in Debian wheezy before 5.0.0a-2.2, in Debian jessie before 5.0.0a-2.3+deb8u1, and in Debian unstable before 5.0.0a-3 allows remote attackers to execute arbitrary commands via shell metacharacters in the name of an LZMA-compressed file...

10CVSS9.9AI score0.13545EPSS
Exploits0
Cvelist
Cvelist
added 2017/12/05 4:0 p.m.16 views

CVE-2016-1253

The most package in Debian wheezy before 5.0.0a-2.2, in Debian jessie before 5.0.0a-2.3+deb8u1, and in Debian unstable before 5.0.0a-3 allows remote attackers to execute arbitrary commands via shell metacharacters in the name of an LZMA-compressed file...

9.9AI score0.13545EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2010/07/01 12:0 a.m.26 views

Fedora 11 : GraphicsMagick-1.3.7-4.fc11 (2010-0001)

Mon Dec 28 2009 Rex Dieter - 1.3.7-4 - CVE-2009-1882 503017 - Fri Dec 4 2009 Stepan Kasal - 1.3.7-3 - rebuild against perl 5.10.1 - Fri Nov 6 2009 Rex Dieter - 1.3.7-2 - cleanup/uncruftify .spec - Thu Sep 17 2009 Rex Dieter - 1.3.7-1 - GraphicsMagick-1.3.7 - Mon Aug 3 2009 Ville Skytta - 1.3.6-2...

9.3CVSS6.9AI score0.03413EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2009/04/09 12:0 a.m.13 views

Mandriva Update for kdelibs MDVA-2008:015 (kdelibs)

Check for the Version of kdelibs OpenVAS Vulnerability Test Mandriva Update for kdelibs MDVA-2008:015 kdelibs Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

0.1AI score
Exploits0References2
Rows per page
Query Builder