11343 matches found
ECHO-1FCB-1955-3C69 NULL pointer write in the wget applet's -T/--timeout handling (networking/wget.c): getopt32() is handed NULL as the -T storage only when busybox is built with CONFIG_WGET but WITHOUT CONFIG_FEATURE_WGET_TIMEOUT ("IF_NOT_FEATURE_WGET_TIMEOUT(NULL)"). Every busybox Echo ships is built from Debian's own configs, where that combination never occurs: debian/config/pkg/deb and debian/config/pkg/static (busybox, busybox-static, busybox-syslogd, udhcpc, udhcpd) set CONFIG_FEATURE_WGET_TIMEOUT=y, so -T is stored in G.timeout_seconds, and debian/config/pkg/udeb does not build wget at all. Verified on 1:1.38.0-3: a build from debian/config/pkg/deb and Debian's busybox and busybox-static binaries answer "wget -T 5" and "wget --timeout 5" normally, while the same tree with only FEATURE_WGET_TIMEOUT turned off segfaults on "wget -T 5". The cited "patch" 83a40bf is a commit in a third-party fork, not in upstream busybox, and bundles unrelated applet changes. Debian rates the CVE unimportant ("crash in CLI tool, no security impact").
Bulletin has no description...
ECHO-541C-D60F-BECF
Bulletin has no description...
ECHO-3082-40D8-B433
Bulletin has no description...
ECHO-AEDC-77A2-EED9
Bulletin has no description...
ECHO-4613-FFC8-5275
Bulletin has no description...
ECHO-F416-684B-55BD
Bulletin has no description...
ECHO-ECF1-0BE2-5CD0
Bulletin has no description...
ECHO-9151-32E7-325F
Bulletin has no description...
ECHO-C008-EFF9-E3F0
Bulletin has no description...
ECHO-0AB6-B517-EA67
Bulletin has no description...
ECHO-93DB-6972-5920
Bulletin has no description...
ECHO-3CFC-B0B4-21DD
Bulletin has no description...
ECHO-607D-E226-D9B2
Bulletin has no description...
ECHO-596F-7D00-097D
Bulletin has no description...
ECHO-E7FA-7050-0A91
Bulletin has no description...
ECHO-02EA-72A4-FE7A
Bulletin has no description...
ECHO-0B6E-BF35-F32A
Bulletin has no description...
ECHO-FCA2-5D51-7D6D
Bulletin has no description...
ECHO-D825-D451-60E0
Bulletin has no description...
ECHO-64F1-9158-8F37
Bulletin has no description...
ECHO-C0F0-B4E6-96DB
Bulletin has no description...
ECHO-B35C-9032-DB2F
Bulletin has no description...
ECHO-9A6C-5607-FD1B
Bulletin has no description...
ECHO-3407-BA73-148E
Bulletin has no description...
ECHO-8AF2-71E7-4B82
Bulletin has no description...
ECHO-1F2A-A632-EE71
Bulletin has no description...
ECHO-B98E-B63C-2D5F
Bulletin has no description...
ECHO-6F2B-D2B2-D50C
Bulletin has no description...
ECHO-86FA-8A7D-D92B
Bulletin has no description...
ECHO-E07C-2FBA-E60C
Bulletin has no description...
ECHO-29A6-7992-DF6D
Bulletin has no description...
ECHO-1E44-B57B-9D8B
Bulletin has no description...
ECHO-5D2B-9E8C-BDEC
Bulletin has no description...
ECHO-F355-4A28-B67E
Bulletin has no description...
ECHO-4612-02EE-2B3E
Bulletin has no description...
ECHO-9F82-DC11-1360
Bulletin has no description...
ECHO-48B4-F133-D141
Bulletin has no description...
ECHO-67DA-49B3-07EC
Bulletin has no description...
ECHO-FC20-8BD8-847A
Bulletin has no description...
ECHO-BDF0-0082-C899
Bulletin has no description...
ECHO-6E5F-914C-DCAC
Bulletin has no description...
ECHO-B963-92F2-CBC3
Bulletin has no description...
ECHO-D43E-4B7E-6CC8
Bulletin has no description...
ECHO-7FDC-16AB-1DD6
Bulletin has no description...
ECHO-25C0-43EF-F653
Bulletin has no description...
ECHO-E9A7-921D-59AE
Bulletin has no description...
ECHO-858E-FAEA-85EF
Bulletin has no description...
ECHO-B804-39CF-8307
Bulletin has no description...