Cross Site Scripting (XSS)

🗓️ 11 Apr 2022 02:59:10Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 48 Views

Vulnerability in busybox allows arbitrary code execution via netstat

Reporter	Title	Published	Views	Family All 52
Amazon	Medium: busybox	7 Jul 202200:00	–	amazon
Tenable Nessus	Amazon Linux AMI : busybox (ALAS-2022-1608)	8 Jul 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : busybox (EulerOS-SA-2022-1958)	8 Jul 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : busybox (EulerOS-SA-2022-1988)	8 Jul 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP10 : busybox (EulerOS-SA-2022-2126)	29 Jul 202200:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP10 : busybox (EulerOS-SA-2022-2151)	29 Jul 202200:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: busybox (CVE-2022-28391)	20 Mar 202300:00	–	nessus
Tenable Nessus	Siemens SIMATIC S7-1500 TM MFP BIOS Missing Encryption of Sensitive Data (CVE-2022-28391)	25 Feb 202500:00	–	nessus
AlpineLinux	CVE-2022-28391	3 Apr 202220:20	–	alpinelinux
Information Security Automation	Scanvus now supports Vulners and Vulns.io VM Linux vulnerability detection APIs	30 Dec 202218:03	–	avleonov

Vulners

Node

busybox busyboxMatch1.31.1-r19os

AND

busybox busyboxMatch1.31.1-r20os

AND

busybox busyboxMatch1.31.1-r21os

AND

busybox busyboxMatch1.31.1-r16os

AND

alpinelinux alpine_linuxMatch3.12

busybox busyboxMatch1.34.1-r3os

AND

busybox busyboxMatch1.34.1-r2os

AND

busybox busyboxMatch1.34.1-r1os

AND

busybox busyboxMatch1.34.1-r4os

AND

alpinelinux alpine_linuxMatch3.15

busybox busyboxMatch1.32.1-r5os

AND

busybox busyboxMatch1.32.1-r7os

AND

busybox busyboxMatch1.32.1-r3os

AND

busybox busyboxMatch1.32.1-r6os

AND

alpinelinux alpine_linuxMatch3.13

busybox busyboxMatch1.34.0-r3os

AND

busybox busyboxMatch1.35.0-r0os

AND

busybox busyboxMatch1.33.0-r5os

AND

busybox busyboxMatch1.35.0-r1os

AND

busybox busyboxMatch1.35.0-r2os

AND

busybox busyboxMatch1.34.1-r1os

AND

busybox busyboxMatch1.33.1-r4os

AND

busybox busyboxMatch1.33.0-r4os

AND

busybox busyboxMatch1.31.1-r15os

AND

busybox busyboxMatch1.33.0-r3os

AND

busybox busyboxMatch1.35.0-r5os

AND

busybox busyboxMatch1.31.1-r16os

AND

busybox busyboxMatch1.33.1-r1os

AND

busybox busyboxMatch1.33.1-r5os

AND

busybox busyboxMatch1.33.1-r2os

AND

busybox busyboxMatch1.34.1-r3os

AND

busybox busyboxMatch1.33.0-r2os

AND

busybox busyboxMatch1.34.0-r5os

AND

busybox busyboxMatch1.34.1-r6os

AND

busybox busyboxMatch1.31.1-r12os

AND

busybox busyboxMatch1.34.1-r0os

AND

busybox busyboxMatch1.34.0-r2os

AND

busybox busyboxMatch1.34.1-r2os

AND

busybox busyboxMatch1.33.0-r7os

AND

busybox busyboxMatch1.35.0-r6os

AND

busybox busyboxMatch1.35.0-r3os

AND

busybox busyboxMatch1.34.1-r4os

AND

busybox busyboxMatch1.33.0-r6os

AND

busybox busyboxMatch1.31.1-r14os

AND

busybox busyboxMatch1.31.1-r13os

AND

alpinelinux alpine_linuxMatchedge

busybox busyboxMatch1.33.1-r1os

AND

busybox busyboxMatch1.33.1-r6os

AND

busybox busyboxMatch1.33.1-r3os

AND

busybox busyboxMatch1.33.1-r2os

AND

alpinelinux alpine_linuxMatch3.14

Source	Link
secdb	www.secdb.alpinelinux.org/v3.14/main.yaml
secdb	www.secdb.alpinelinux.org/edge/main.yaml
secdb	www.secdb.alpinelinux.org/v3.12/main.yaml
secdb	www.secdb.alpinelinux.org/v3.13/main.yaml
secdb	www.secdb.alpinelinux.org/v3.15/main.yaml
git	www.git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch
git	www.git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch
gitlab	www.gitlab.alpinelinux.org/alpine/aports/-/issues/13661

17 Nov 2023 02:47Current

8.5High risk

Vulners AI Score8.5

CVSS 26.8

CVSS 3.18.8

EPSS0.03075