CVE-2022-28391

CVE-2022-28391 — BusyBox : Vulnerability allows remote code execution if netstat prints a DNS PTR record value to a VT terminal (or attacker can change terminal colors). Affected: BusyBox up to 1.35.0. Remediation: upgrade to patched BusyBox versions (e.g., 1.35.0-2 or newer like 1.36.1-3 as seen...

CVE-2022-48174

CVE-2022-48174 is a stack overflow in BusyBox ash.c:6030 affecting versions before 1.35. In Internet of Vehicles contexts this can enable arbitrary code execution from a crafted input command. Public details confirm the vulnerability in BusyBox prior to 1.35 and indicate exposure in IoT environme...

CVE-2016-6301

Technical details are not provided in the supplied documents. The initial description notes a BusyBox NTP DoS via forged NTP packets but no concrete technical specifics or remediation are provided here.

CVE-2022-30065

CVE-2022-30065 concerns a use-after-free in the Busybox 1.35-x awk applet, due to a flaw in the copyvar function that can trigger denial of service and potentially code execution when processing a crafted awk pattern. Public details consistently name Busybox as affected and describe the issue as ...

CVE-2013-1813

CVE-2013-1813 affects BusyBox where util-linux/mdev.c creates intermediate /dev/ directories with 0777 permissions when nesting (/dev/dir1/dir2/...), allowing local users to exploit the improper permission handling. The linked Nessus/OpenVAS entries (e.g., MiracleLinux AXSA advisory referencing B...

CVE-2016-2148

CVE-2016-2148 concerns a heap-based buffer overflow in BusyBox’s udhcpc DHCP client, exploitable remotely via DHCP OPTION_6RD parsing in BusyBox versions earlier than 1.25.0. The F5 advisory reiterates that this can enable Remote Code Execution and notes that exploitation is contingent on AOM net...

CVE-2011-5325

CVE-2011-5325 is a vulnerability in BusyBox tar before 1.22.0 (v5) that enables a directory traversal by abusing symlinks. The affected component is BusyBox tar, and the root cause is how tar handles tar entries that, via a symlink, point to files outside the current working directory. The descri...

CVE-2018-1000517

The CVE-2018-1000517 issue affects BusyBox wget prior to the commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e, describing a heap-based buffer overflow that can be exploited via network connectivity. OpenVAS/SUSE advisories confirm the fix in BusyBox upstream 1.35.0 and subsequent security updates ...

CVE-2017-16544

CVE-2017-16544 affects BusyBox, specifically the add_match function in libbb/lineedit.c, where tab completion can execute an escape sequence in the terminal due to unsanitized filenames (vulnerable through 1.27.2). Multiple connected advisories confirm the issue and describe potential arbitrary c...

CVE-2018-1000500

CVE-2018-1000500 affects the BusyBox wget applet, where SSL certificate validation is missing. The vulnerability can enable arbitrary code execution when a user downloads an HTTPS file from a compromised domain, as described in multiple sources. The issue is tied to BusyBox’s wget SSL validation ...

CVE-2021-28831

CVE-2021-28831 affects BusyBox prior to 1.32.1. The issue arises when decompress_gunzip.c mishandles the error bit on the huft_build result pointer, leading to an invalid free or segmentation fault via malformed gzip data. Several connected advisories confirm the same root cause and describe a re...

CVE-2018-20679

CVE-2018-20679 — BusyBox udhcp (DHCP) out-of-bounds read is fixed in BusyBox before 1.30.0. The issue occurs in udhcp_get_option() where 4-byte options are not consistently validated, enabling a remote attacker to leak information from the stack via crafted DHCP messages. The vulnerability affect...

CVE-2016-2147

CVE-2016-2147 affects BusyBox’s DHCP client (udhcpc) prior to 1.25.0. An integer overflow in handling a malformed RFC1035-encoded domain name can trigger an out-of-bounds heap write, allowing remote attackers to cause a denial of service (crash) via the network. The initial description specifies ...

CVE-2015-9261

CVE-2015-9261 affects BusyBox before 1.27.2. The vuln is in huft_build, in archival/libarchive/decompress_gunzip.c, where a pointer is misused, causing segfaults and application crashes during unzip of a specially crafted ZIP file. Affected product: BusyBox (generic) with the cited code path. Imp...

CVE-2011-2716

CVE-2011-2716 affects BusyBox udhcpc (DHCP client). The vulnerability allows a remote DHCP server to execute arbitrary commands by injecting shell metacharacters in DHCP options HOST_NAME, DOMAIN_NAME, NIS_DOMAIN, or TFTP_SERVER_NAME. Provided connected documents confirm BusyBox versions prior to...

CVE-2019-5747

CVE-2019-5747 affects BusyBox udhcp components (DHCP client/server/relay) via an out-of-bounds read that can leak stack data when handling crafted DHCP messages. Root cause relates to 4-byte option length verification in udhcp_get_option() as part of a prior fix for CVE-2018-20679. Affected produ...

CVE-2014-9645

The CVE-2014-9645 entry concerns BusyBox, where the add_probe function in modutils/modprobe.c allows a local user to bypass module-loading restrictions when a slash (/) is used in a module name (e.g., ifconfig /usbserial up or mount -t /snd_pcm none /). This is a local-privilege-elevation style f...

CVE-2021-42378

CVE-2021-42378 is a use-after-free in BusyBox’s awk applet that can cause denial of service and potentially code execution when processing crafted awk patterns in getvar_i. Connected documents confirm the issue across multiple OS/package tracks (e.g., Debian/DLA advisories reference BusyBox patte...

CVE-2021-42386

Summary of CVE-2021-42386 (BusyBox) A use-after-free in BusyBox's awk applet (nvalloc function) can cause denial of service and potentially code execution when processing crafted awk patterns. This vulnerability affects BusyBox prior to patched releases across multiple platforms (Linux distributi...

CVE-2021-42376

CVE-2021-42376 is a BusyBox vulnerability affecting the hush applet where a NULL pointer dereference can cause denial of service when processing a crafted command due to missing validation after a delimiter. Public disclosures and vendor advisories across multiple distributions (Debian, Alpine, F...

CVE-2021-42379

CVE-2021-42379 is a vulnerability in BusyBox’s awk applet causing a use-after-free in the next_input_file function, leading to denial of service and potentially code execution when processing crafted awk patterns. Publicly documented in Debian LTS advisories and vendor bulletins as affecting Busy...

CVE-2021-42385

CVE-2021-42385 is a BusyBox vulnerability in the awk applet. The issue is a use-after-free in the awk evaluate function, which can cause denial of service and potentially allow code execution when processing a crafted awk pattern. Public reports across multiple vendors reference BusyBox awk patte...

CVE-2025-46394

CVE-2025-46394 affects BusyBox tar up to version 1.37.0. A TAR archive can misuse terminal escape sequences to hide filenames from listings, causing a mismatch between on-disk contents and what is shown to the user. The vulnerability is a UI misinformation issue (CWE-451) with low overall impact ...

CVE-2021-42384

CVE-2021-42384 is a use-after-free in BusyBox's awk applet (handle_special) that can cause denial of service and, per some advisories, may lead to code execution when processing crafted awk patterns. The connected documents confirm this vulnerability across multiple BusyBox deployments (Debian, A...

CVE-2025-60876

CVE-2025-60876 affects BusyBox wget up to 1.3.7. The issue stems from accepting raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target, allowing the request-line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape, a raw s...

CVE-2021-42382

CVE-2021-42382 is a publicly documented use-after-free in BusyBox, specifically in the awk applet (getvar_s function), which can cause denial of service and possibly code execution when processing crafted awk patterns. Connected sources confirm the issue and note remediation via BusyBox upgrades....

CVE-2017-15873

CVE-2017-15873 is tied to BusyBox 1.27.2 where the function get_next_block in archival/libarchive/decompress_bunzip2.c may overflow an integer, leading to a write access violation. The connected sources (NVD entry for CVE-2017-15873 and multiple vendor advisories/Nessus plugins) confirm this vuln...

CVE-2021-42374

CVE-2021-42374 is an out-of-bounds heap read in BusyBox’s unlzma applet that can lead to information leakage and denial of service when decompressing crafted LZMA input. Connected sources confirm impact on BusyBox broadly (unlzma) across multiple distributions and variants (e.g., Debian/BusyBox a...

CVE-2021-42377

CVE-2021-42377 (BusyBox) is one of multiple vulnerabilities affecting BusyBox, specifically in the hush applet. The issue is an attacker-controlled pointer free that can cause denial of service and, under rare crafted inputs, may enable remote code execution. The vulnerability is categorized unde...

CVE-2021-42380

CVE-2021-42380 is a use-after-free in BusyBox's awk applet (nvalloc/clrvar path variants reported across vendors) that can cause denial of service and may allow code execution when processing crafted awk patterns. The Connected documents confirm BusyBox as affected and indicate a patch exists in ...

CVE-2021-42381

CVE-2021-42381 is a use-after-free in BusyBox’s awk applet (hash_init path) that can cause denial of service and may lead to code execution when processing crafted awk patterns. Affected BusyBox versions exist across distros; remediation is to upgrade BusyBox to a patched release (e.g., Debian 1:...

CVE-2023-42366

CVE-2023-42366 : BusyBox v1.36.1 contains a heap-buffer-overflow in the next_token path (awk.c:1159). This vulnerability could cause a crash/denial of service when processing crafted awk input. The issue is documented in multiple Nessus/EulerOS advisories tied to BusyBox 1.36.1; no vendor/product...

CVE-2021-42375

CVE-2021-42375 concerns BusyBox ash applet: incorrect handling of a special element can trigger a denial of service when processing a crafted shell command. Affected product: Cloud Pak for Security (CP4S) versions 1.8.1.0, 1.8.0.0, and 1.7.2.0. Remediation: upgrade to CP4S 1.9.0.0 per IBM guidanc...

CVE-2021-42373

CVE-2021-42373 is a NULL pointer dereference in BusyBox's man applet triggered when a section name is supplied but no page argument is given, causing a denial of service via local access. Affected product: BusyBox (man applet). Root cause: NULL pointer dereference in mq_handle logic; impact: loca...

CVE-2021-42383

The CVE-2021-42383 entry describes a use-after-free in BusyBox's awk applet that can trigger denial of service and possibly code execution when processing a crafted awk pattern. The available document states the vulnerability effect in BusyBox but provides no product version specifics beyond Busy...

CVE-2017-15874

CVE-2017-15874 : BusyBox 1.27.2 has an integer underflow in archival/libarchive/decompress_unlzma.c that leads to a read access violation. The connected documents confirm the affected component/file and the underlying issue; no public fix version is provided in the supplied materials. The referen...

CVE-2023-42363

CVE-2023-42363 (BusyBox) is a local-use-after-free in BusyBox v1.36.1, triggered in xasprintf (xfuncs_printf.c:344). Exploitation can cause a crash/DoS as described by the connected documentation; no patch/version fix is provided in the supplied materials. The CVSS vector indicates a low attack v...

CVE-2023-42365

CVE-2023-42365 : A use-after-free in BusyBox v1.36.1 is triggered by a crafted awk pattern in the awk.c copyvar function. This is a local vulnerability that can lead to a crash or potential code execution depending on context (per the description). The issue has been reported in public advisories...

CVE-2023-39810

The entry CVE-2023-39810 covers a directory traversal in BusyBox’s CPIO command, specifically in BusyBox v1.33.2. The Connected documents show multiple advisories and scanners (EulerOS, TencentOS Server 4, Unity Linux, Huawei EulerOS, EulerOS SP11/SP12, etc.) referencing this CVE as affecting Bus...

CVE-2023-42364

CVE-2023-42364 describes a use-after-free in BusyBox v1.36.1’s awk.c evaluate function that can cause a denial of service via a crafted awk pattern. The Astra Linux security bulletin reiterates the same BusyBox vulnerability. Public details specify the vulnerability and affected binary, but there...

CVE-2026-38755

BusyBox 1.38.0 is affected by CVE-2026-38755 due to a heap overflow in the evalcommand() function (shell/ash.c). The vulnerability can be triggered by crafted input and leads to Denial of Service. The CVE entry reports CVSSv3.1 base score 7.5 (HIGH) with network attack vector, low attack complexi...

CVE-2006-1058

CVE-2006-1058 affects BusyBox 1.1.1, where the passwd generation did not use a salt, enabling local password guessing from a stolen password file. The issue is addressed by security advisories and patches in multiple distributions (RHSA-2007:0244; CESA-2007:0244; ELSA-2007-0244; RHSA). Affected p...

CVE-2026-38753

CVE-2026-38753 affects Busybox v1.38.0 in the editors/awk.c file, specifically the awk_sub() function, where a use-after-free leads to Denial of Service when presented with a crafted AWK script. The available connected sources confirm the affected product and root cause, and describe the impact a...

CVE-2026-38752

Affected software: BusyBox. Vulnerability location: evaluate() in editors/awk.c, commit 371fe9. Issue: stack overflow that can cause a Denial of Service when given a crafted AWK script. Impact: DoS; CVSS indicates high availability impact with network attack vector and no privileges. Evidence not...

CVE-2026-38754

CVE-2026-38754 describes a heap overflow in Busybox v1.38.0, specifically in the ifsbreakup() function (shell/ash.c). Exploitation via crafted input can cause a Denial of Service (DoS). Connected sources confirm the affected software and the underlying cause; there is no public exploit detail in ...