Lucene search
+L

75 matches found

Tenable Nessus
Tenable Nessus
•added 2026/10/21 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-88833

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled...

6.5CVSS6AI score0.00189EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2026/10/15 12:00 a.m.•16 views

UBUNTU-CVE-2026-88833

A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP header without re-validating the minimum size. This leads to an integer underflow when subtracting header sizes, causin...

6.5CVSS6.1AI score0.00189EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/10/14 12:53 a.m.•14 views

SUSE CVE-2026-88833

A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP header without re-validating the minimum size. This leads to an integer underflow when subtracting header sizes, causin...

6.5CVSS6.1AI score0.00189EPSS
SaveExploits0References3
osv_azl
osv_azl
•added 2026/10/13 5:17 p.m.•12 views

AZL-108321 CVE-2026-88833 affecting package busybox 1.36.1-28

A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP header without re-validating the minimum size. This leads to an integer underflow when subtracting header sizes, causin...

6.5CVSS6.1AI score0.00189EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/13 5:17 p.m.•28 views

CVE-2026-88833

A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP header without re-validating the minimum size. This leads to an integer underflow when subtracting header sizes, causin...

6.5CVSS0.00189EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2026/10/13 5:17 p.m.•30 views

DEBIAN-CVE-2026-88833

A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP header without re-validating the minimum size. This leads to an integer underflow when subtracting header sizes, causin...

6.5CVSS6.1AI score0.00189EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/10/13 5:17 p.m.•17 views

CVE-2026-88833

A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP header without re-validating the minimum size. This leads to an integer underflow when subtracting header sizes, causin...

6.5CVSS6.1AI score0.00189EPSS
SaveExploits0References3
CVE
CVE
•added 2026/10/13 4:56 p.m.•47 views

CVE-2026-88833

A flaw in the BusyBox udhcpc DHCP client allows an attacker on the same network segment to cause a denial of service and loss of network connectivity. The vulnerability occurs because the client replaces a validated packet length with an attacker-controlled value from the IP header without re-val...

6.5CVSS6.1AI score0.00189EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/13 4:56 p.m.•50 views

CVE-2026-88833 Busybox: busybox: udhcpc integer underflow in dhcp packet length calculation causes denial of service

A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP header without re-validating the minimum size. This leads to an integer underflow when subtracting header sizes, causin...

6.5CVSS0.00189EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/13 4:56 p.m.•22 views

EUVD-2026-98897

A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP header without re-validating the minimum size. This leads to an integer underflow when subtracting header sizes, causin...

6.5CVSS6.1AI score0.00189EPSS
SaveExploits0References2
Mend
Mend
•added 2026/10/13 4:56 p.m.•16 views

CVE-2026-88833

A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP header without re-validating the minimum size. This leads to an integer underflow when subtracting header sizes, causin...

7.1CVSS6.1AI score0.00189EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/10/13 4:56 p.m.•18 views

CVE-2026-88833

A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP header without re-validating the minimum size. This leads to an integer underflow when subtracting header sizes, causin...

6.5CVSS6.1AI score0.00189EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/10/13 4:56 p.m.•19 views

CVE-2026-88833

A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP header without re-validating the minimum size. This leads to an integer underflow when subtracting header sizes, causin...

6.5CVSS6.1AI score0.00189EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•18 views

CVE-2026-88833: Integer Underflow (Wrap or Wraparound)

A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP header without re-validating the minimum size. This leads to an integer underflow when subtracting header sizes, causin...

6.5CVSS6.1AI score0.00189EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•15 views

PT-2026-122252

A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP header without re-validating the minimum size. This leads to an integer underflow when subtracting header sizes, causin...

6.5CVSS6.1AI score0.00189EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•17 views

PT-2026-111734

Name of the Vulnerable Software and Affected Versions BusyBox affected versions not specified Description A flaw exists in the udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with a value from the IP header controlled by an attacker without...

6.5CVSS6.1AI score0.00189EPSS
SaveExploits0References21
NVD
NVD
•added 2026/07/30 7:16 a.m.•24 views

CVE-2026-44096

A privilege escalation vulnerability in udhcpc allows a local user "charx-web" to execute arbitrary commands as root, resulting in full system compromise...

8.5CVSS0.00193EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/30 6:49 a.m.•70 views

CVE-2026-44096 udhcpc Privilege Escalation

A privilege escalation vulnerability in udhcpc allows a local user "charx-web" to execute arbitrary commands as root, resulting in full system compromise...

8.5CVSS0.00193EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/30 6:49 a.m.•29 views

CVE-2026-44096

A privilege escalation vulnerability in udhcpc allows a local user "charx-web" to execute arbitrary commands as root, resulting in full system compromise...

8.5CVSS6.1AI score0.00193EPSS
SaveExploits0References2Affected Software4
CVE
CVE
•added 2026/07/30 6:49 a.m.•52 views

CVE-2026-44096

The CVE-2026-44096 entry describes a privilege escalation in udhcpc that allows a local user named "charx-web" to run arbitrary commands as root, leading to full system compromise. The available connected sources confirm the affected component (udhcpc) and the local-exploit scenario, with high se...

8.5CVSS7.7AI score0.00193EPSS
SaveExploits0References1
Rows per page
Query Builder