Lucene search
+L

18 matches found

SUSE CVE
SUSE CVE
•added 2026/10/15 2:14 p.m.•9 views

SUSE CVE-2026-88842

A flaw was found in BusyBox dpkg. The writestatusfile function does not reset a field cursor between package stanzas. When two packages are removed in a single invocation and the first stanza is larger than the second, the second package stanza can be dropped from the status file, causing limited...

3.3CVSS6.1AI score0.00156EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2026/10/15 12:00 a.m.•11 views

UBUNTU-CVE-2026-88842

A flaw was found in BusyBox dpkg. The writestatusfile function does not reset a field cursor between package stanzas. When two packages are removed in a single invocation and the first stanza is larger than the second, the second package stanza can be dropped from the status file, causing limited...

3.3CVSS6.1AI score0.00156EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/10/15 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-88842

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in BusyBox dpkg. The writestatusfile function does not reset a field cursor between package stanzas. When two packages are removed in a single...

3.3CVSS6.1AI score0.00156EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2026/10/14 11:17 a.m.•20 views

DEBIAN-CVE-2026-88842

A flaw was found in BusyBox dpkg. The writestatusfile function does not reset a field cursor between package stanzas. When two packages are removed in a single invocation and the first stanza is larger than the second, the second package stanza can be dropped from the status file, causing limited...

3.3CVSS6.1AI score0.00156EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/14 11:17 a.m.•22 views

CVE-2026-88842

A flaw was found in BusyBox dpkg. The writestatusfile function does not reset a field cursor between package stanzas. When two packages are removed in a single invocation and the first stanza is larger than the second, the second package stanza can be dropped from the status file, causing limited...

3.3CVSS0.00156EPSS
SaveExploits0References3
osv_azl
osv_azl
•added 2026/10/14 11:17 a.m.•16 views

AZL-109773 CVE-2026-88842 affecting package busybox 1.36.1-28

A flaw was found in BusyBox dpkg. The writestatusfile function does not reset a field cursor between package stanzas. When two packages are removed in a single invocation and the first stanza is larger than the second, the second package stanza can be dropped from the status file, causing limited...

3.3CVSS6.1AI score0.00156EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/10/14 11:17 a.m.•14 views

CVE-2026-88842

A flaw was found in BusyBox dpkg. The writestatusfile function does not reset a field cursor between package stanzas. When two packages are removed in a single invocation and the first stanza is larger than the second, the second package stanza can be dropped from the status file, causing limited...

3.3CVSS6.1AI score0.00156EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/10/14 10:02 a.m.•18 views

CVE-2026-88842

A flaw was found in BusyBox dpkg. The writestatusfile function does not reset a field cursor between package stanzas. When two packages are removed in a single invocation and the first stanza is larger than the second, the second package stanza can be dropped from the status file, causing limited...

3.3CVSS6.1AI score0.00156EPSS
SaveExploits0References3
CVE
CVE
•added 2026/10/14 10:02 a.m.•89 views

CVE-2026-88842

A flaw exists in the BusyBox dpkg utility where the write_status_file() function fails to reset a field cursor between package stanzas. This results in an out-of-bounds read and leads to limited data corruption when two packages are removed in a single invocation, specifically if the first stanza...

3.3CVSS6.1AI score0.00156EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/10/14 10:02 a.m.•9 views

CVE-2026-88842 Busybox: busybox: dpkg stale field_start pointer causes out-of-bounds read and status file corruption

A flaw was found in BusyBox dpkg. The writestatusfile function does not reset a field cursor between package stanzas. When two packages are removed in a single invocation and the first stanza is larger than the second, the second package stanza can be dropped from the status file, causing limited...

3.3CVSS6.1AI score0.00156EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/10/14 10:02 a.m.•15 views

EUVD-2026-100957

A flaw was found in BusyBox dpkg. The writestatusfile function does not reset a field cursor between package stanzas. When two packages are removed in a single invocation and the first stanza is larger than the second, the second package stanza can be dropped from the status file, causing limited...

3.3CVSS6.1AI score0.00156EPSS
SaveExploits0References2
Mend
Mend
•added 2026/10/14 10:02 a.m.•15 views

CVE-2026-88842

A flaw was found in BusyBox dpkg. The writestatusfile function does not reset a field cursor between package stanzas. When two packages are removed in a single invocation and the first stanza is larger than the second, the second package stanza can be dropped from the status file, causing limited...

4.8CVSS6.1AI score0.00156EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/10/14 10:02 a.m.•45 views

CVE-2026-88842 Busybox: busybox: dpkg stale field_start pointer causes out-of-bounds read and status file corruption

A flaw was found in BusyBox dpkg. The writestatusfile function does not reset a field cursor between package stanzas. When two packages are removed in a single invocation and the first stanza is larger than the second, the second package stanza can be dropped from the status file, causing limited...

3.3CVSS0.00156EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2026/10/14 10:02 a.m.•15 views

CVE-2026-88842

A flaw was found in BusyBox dpkg. The writestatusfile function does not reset a field cursor between package stanzas. When two packages are removed in a single invocation and the first stanza is larger than the second, the second package stanza can be dropped from the status file, causing limited...

3.3CVSS6.1AI score0.00156EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/14 12:00 a.m.•7 views

CVE-2026-88842: Out-of-bounds Read

A flaw was found in BusyBox dpkg. The writestatusfile function does not reset a field cursor between package stanzas. When two packages are removed in a single invocation and the first stanza is larger than the second, the second package stanza can be dropped from the status file, causing limited...

3.3CVSS6.1AI score0.00156EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2026/10/12 5:14 p.m.•7 views

busybox: busybox: dpkg stale field_start pointer causes out-of-bounds read and status file corruption

A flaw was found in BusyBox dpkg. The writestatusfile function does not reset a field cursor between package stanzas. When two packages are removed in a single invocation and the first stanza is larger than the second, the second package stanza can be dropped from the status file, causing limited...

3.3CVSS6.1AI score0.00156EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2026/09/29 3:30 p.m.•19 views

busybox: busybox: dpkg write_status_file() stale cursor causes out-of-bounds read and status file corruption

BusyBox dpkg writestatusfile does not reset a stale field cursor between package stanzas, causing out-of-bounds reads and status file corruption when removing multiple packages...

6.1AI score
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/09/24 10:35 a.m.•23 views

CVE-2026-88841

BusyBox dpkg writestatusfile does not reset a stale field cursor between package stanzas, causing out-of-bounds reads and status file corruption when removing multiple packages. Mitigation Do not use the BusyBox dpkg applet for package management on systems where package integrity is critical...

3.3CVSS6.1AI score
SaveExploits0References3
Rows per page
Query Builder