CVE-2024-58251
In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv...
In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.
- Record
CVE-2024-58251- CVSS 3.1
- 2.5 Low
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Weakness
- CWE-150
- Updated
- 2026-11-02
EUVDEUVD-2025-12151
In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.
- Record
EUVD-2025-12151- CVSS 3.1
- 2.5 Low
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-rrv5-483w-xmr9
In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv...
In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.
- Record
GHSA-rrv5-483w-xmr9- CVSS 3.1
- 2.5 Low
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Weakness
- CWE-150
- Updated
- 2026-11-02
NVD
In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.
- Record
CVE-2024-58251- CVSS 3.1
- 2.5 Low
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Weakness
- CWE-150
- Updated
- 2026-11-02
OSVALPINE-CVE-2024-58251
In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.
- Record
ALPINE-CVE-2024-58251- CVSS 3.1
- 2.5 Low
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVBELL-CVE-2024-58251
- Record
BELL-CVE-2024-58251- CVSS 3.1
- 2.5 Low
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
Show 23 moreShow less
OSVDEBIAN-CVE-2024-58251
In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.
- Record
DEBIAN-CVE-2024-58251- CVSS 3.1
- 2.5 Low
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVOESA-2025-2328
busybox security update
BusyBox combines tiny versions of many common UNIX utilities into a single small executable. It provides replacements for most of the utilities you usually find in GNU fileutils, shellutils, etc. It provides a fairly complete environment for any small or embedded system.
Security Fix(es):
In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.(CVE-2024-58251)
- Record
OESA-2025-2328- CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVUBUNTU-CVE-2024-58251
In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.
- Record
UBUNTU-CVE-2024-58251- CVSS 3.1
- 2.5 Low
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVAZL-60933 No score
CVE-2024-58251 affecting package busybox 1.36.1-28
In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.
- Record
AZL-60933- Updated
- 2026-11-05
OSVAZL-61217 No score
CVE-2024-58251 affecting package busybox 1.35.0-18
In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.
- Record
AZL-61217- Updated
- 2026-11-02
OSV No score
In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.
- Record
CVE-2024-58251- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:10679-1 No score
net-tools-3.14~alpha~git.20251212.7011617-1.1 on GA media
These are all security issues fixed in the net-tools-3.14alphagit.20251212.7011617-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:10679-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:12376-1 No score
busybox-1.38.0-4.1 on GA media
These are all security issues fixed in the busybox-1.38.0-4.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:12376-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:20696-1 No score
Security update for iproute2
This update for iproute2 fixes the following issues:
Security issues fixed:
- CVE-2024-58251: terminal lock up via ANSI terminal escape sequence set in
argv[0](bsc#1254324).
Other updates and bugfixes:
- Fix package for immutable mode (jsc#PED-14787).
- Add netshaper support (bsc#1253044).
- Add follow-up fixes included by upstream after the 6.12 release (bsc#1241316):
- Parse FQ band weights correctly
- bond: fix stack smash in xstats
- ip: support setting multiple features
- tc: gred: fix debug print
- Record
openSUSE-SU-2026:20696-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:21429-1 No score
Security update for net-tools
This update for net-tools fixes the following issue:
- CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254323).
- Record
openSUSE-SU-2026:21429-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:1418-1 No score
Security update for iproute2
This update for iproute2 fixes the following issue:
- CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254324).
- Record
SUSE-SU-2026:1418-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:21572-1 No score
Security update for iproute2
This update for iproute2 fixes the following issues:
Security issues fixed:
- CVE-2024-58251: terminal lock up via ANSI terminal escape sequence set in
argv[0](bsc#1254324).
Other updates and bugfixes:
- Fix package for immutable mode (jsc#PED-14787).
- Add netshaper support (bsc#1253044).
- Add follow-up fixes included by upstream after the 6.12 release (bsc#1241316):
- Parse FQ band weights correctly
- bond: fix stack smash in xstats
- ip: support setting multiple features
- tc: gred: fix debug print
- Record
SUSE-SU-2026:21572-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:21582-1 No score
Security update for iproute2
This update for iproute2 fixes the following issues:
Security issues fixed:
- CVE-2024-58251: terminal lock up via ANSI terminal escape sequence set in
argv[0](bsc#1254324).
Other updates and bugfixes:
- Fix package for immutable mode (jsc#PED-14787).
- Add netshaper support (bsc#1253044).
- Add follow-up fixes included by upstream after the 6.12 release (bsc#1241316):
- Parse FQ band weights correctly
- bond: fix stack smash in xstats
- ip: support setting multiple features
- tc: gred: fix debug print
- Record
SUSE-SU-2026:21582-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:21679-1 No score
Security update for iproute2
This update for iproute2 fixes the following issue
- CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254324).
Changes for iproute2:
- support display of bound but unconnected sockets (bsc#1204562).
- avoid spurious cgroup warning (bsc#1234383).
- add post-6.4 follow-up fixes (bsc#1243005).
- devlink: support ipsec_crypto and ipsec_packet cap (bsc#1248660).
- Record
SUSE-SU-2026:21679-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:21737-1 No score
Security update for iproute2
This update for iproute2 fixes the following issue
- CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254324).
Changes for iproute2:
- support display of bound but unconnected sockets (bsc#1204562).
- avoid spurious cgroup warning (bsc#1234383).
- add post-6.4 follow-up fixes (bsc#1243005).
- devlink: support ipsec_crypto and ipsec_packet cap (bsc#1248660).
- Record
SUSE-SU-2026:21737-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:22862-1 No score
Security update for net-tools
This update for net-tools fixes the following issue:
- CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254323).
- Record
SUSE-SU-2026:22862-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:22936-1 No score
Security update for net-tools
This update for net-tools fixes the following issue:
- CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254323).
- Record
SUSE-SU-2026:22936-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23037-1 No score
Security update for net-tools
This update for net-tools fixes the following issues:
- CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254323).
- Record
SUSE-SU-2026:23037-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:23076-1 No score
Security update for net-tools
This update for net-tools fixes the following issues:
- CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254323).
- Record
SUSE-SU-2026:23076-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:2620-1 No score
Security update for iproute2
This update for iproute2 fixes the following issue
- CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254324).
Other updates:
- support display of bound but unconnected sockets (bsc#1204562)
- Record
SUSE-SU-2026:2620-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:3150-1 No score
Security update for iproute2
This update for iproute2 fixes the following issue
- CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254324).
- Record
SUSE-SU-2026:3150-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:3222-1 No score
Security update for net-tools
This update for net-tools fixes the following issues:
- CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254323).
- Record
SUSE-SU-2026:3222-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:3223-1 No score
Security update for net-tools
This update for net-tools fixes the following issues:
- CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254323).
- Record
SUSE-SU-2026:3223-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
busyboxAlpine:v3.19 |
before 1.36.1-r21 | 1.36.1-r21 |
busyboxAlpine:v3.20 |
before 1.36.1-r31 | 1.36.1-r31 |
busyboxAlpine:v3.21 |
before 1.37.0-r14 | 1.37.0-r14 |
busyboxAlpine:v3.22 |
before 1.37.0-r20 | 1.37.0-r20 |
busyboxAlpine:v3.23 |
before 1.37.0-r24 | 1.37.0-r24 |
busyboxAlpine:v3.24 |
before 1.37.0-r24 | 1.37.0-r24 |
busyboxAzure Linux:3 |
through 1.36.1-28 | None known |
busyboxAzure Linux:2 |
through 1.35.0-18 | None known |
busyboxAlpaquita:23 |
1.35.0-r29 up to 1.35.0-r36 | 1.35.0-r36 |
busyboxAlpaquita:25 |
1.37.0-r20 up to 1.37.0-r24 | 1.37.0-r24 |
Show 41 moreShow less
| Package | Affected | Fixed |
|---|---|---|
busyboxAlpaquita:stream |
1.36.1-r1 up to 1.37.0-r28 | 1.37.0-r28 |
busyboxBellSoft Hardened Containers:23 |
1.35.0-r29 up to 1.35.0-r36 | 1.35.0-r36 |
busyboxBellSoft Hardened Containers:25 |
1.37.0-r20 up to 1.37.0-r24 | 1.37.0-r24 |
busyboxBellSoft Hardened Containers:stream |
1.36.1-r1 up to 1.37.0-r28 | 1.37.0-r28 |
busyboxDebian:12 |
All versions, plus listed versions 1:1.35.0-41:1.35.0-4+deb12u11:1.36.0-1~exp11:1.36.1-11:1.36.1-2 Show 23 moreShow less1:1.36.1-31:1.36.1-3.11:1.36.1-41:1.36.1-51:1.36.1-61:1.36.1-6~exp.11:1.36.1-71:1.36.1-81:1.36.1-91:1.37.0-11:1.37.0-101:1.37.0-10.11:1.37.0-21:1.37.0-31:1.37.0-41:1.37.0-51:1.37.0-61:1.37.0-71:1.37.0-81:1.37.0-91:1.38.0-11:1.38.0-21:1.38.0-3 |
None known |
busyboxDebian:13 |
All versions, plus listed versions 1:1.37.0-101:1.37.0-10.11:1.37.0-61:1.37.0-71:1.37.0-8 Show 4 moreShow less1:1.37.0-91:1.38.0-11:1.38.0-21:1.38.0-3 |
None known |
busyboxDebian:14 |
before 1:1.37.0-9, plus listed versions 1:1.37.0-61:1.37.0-71:1.37.0-8 |
1:1.37.0-9 |
busyboxopenEuler:22.03-LTS-SP4 |
before 1.34.1-26.oe2203sp4 | 1.34.1-26.oe2203sp4 |
busyboxopenEuler:24.03-LTS |
before 1.36.1-12.oe2403sp2 | 1.36.1-12.oe2403sp2 |
busyboxopenEuler:24.03-LTS-SP1 |
before 1.36.1-12.oe2403sp1 | 1.36.1-12.oe2403sp1 |
busyboxopenEuler:24.03-LTS-SP2 |
before 1.36.1-12.oe2403sp2 | 1.36.1-12.oe2403sp2 |
busyboxopenEuler:20.03-LTS-SP4 |
before 1.31.1-26.oe2003sp4 | 1.31.1-26.oe2003sp4 |
busyboxopenEuler:22.03-LTS-SP3 |
before 1.34.1-26.oe2203sp3 | 1.34.1-26.oe2203sp3 |
iproute2SUSE:Linux Enterprise Module for Basesystem 15 SP7 |
before 6.4-150600.7.12.1 | 6.4-150600.7.12.1 |
net-toolsSUSE:Linux Enterprise Server 16.0 |
before 2.10-160000.4.1 | 2.10-160000.4.1 |
net-toolsSUSE:Linux Enterprise Server for SAP applications 16.0 |
before 2.10-160000.4.1 | 2.10-160000.4.1 |
net-toolsSUSE:Linux Micro 6.2 |
before 2.10-160000.4.1 | 2.10-160000.4.1 |
net-toolsSUSE:Linux Micro 6.0 |
before 2.10-5.1 | 2.10-5.1 |
net-toolsSUSE:Linux Micro 6.1 |
before 2.10-slfo.1.1_3.1 | 2.10-slfo.1.1_3.1 |
iproute2SUSE:Linux Enterprise Micro 5.3 |
before 5.14-150400.3.6.1 | 5.14-150400.3.6.1 |
iproute2SUSE:Linux Enterprise Micro 5.4 |
before 5.14-150400.3.6.1 | 5.14-150400.3.6.1 |
iproute2SUSE:Linux Enterprise Micro 5.5 |
before 5.14-150400.3.6.1 | 5.14-150400.3.6.1 |
iproute2SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 |
before 4.12-16.9.1 | 4.12-16.9.1 |
net-toolsSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 |
before 1.60-765.20.1 | 1.60-765.20.1 |
net-toolsSUSE:Linux Enterprise Micro 5.3 |
before 2.0+git20170221.479bb4a-150000.5.18.1 | 2.0+git20170221.479bb4a-150000.5.18.1 |
net-toolsSUSE:Linux Enterprise Micro 5.4 |
before 2.0+git20170221.479bb4a-150000.5.18.1 | 2.0+git20170221.479bb4a-150000.5.18.1 |
net-toolsSUSE:Linux Enterprise Micro 5.5 |
before 2.0+git20170221.479bb4a-150000.5.18.1 | 2.0+git20170221.479bb4a-150000.5.18.1 |
net-toolsSUSE:Linux Enterprise Module for Basesystem 15 SP7 |
before 2.0+git20170221.479bb4a-150000.5.18.1 | 2.0+git20170221.479bb4a-150000.5.18.1 |
net-toolsSUSE:Linux Enterprise Module for Legacy 15 SP7 |
before 2.0+git20170221.479bb4a-150000.5.18.1 | 2.0+git20170221.479bb4a-150000.5.18.1 |
busyboxUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 1:1.20.0-8.1ubuntu11:1.20.0-9ubuntu11:1.20.0-9ubuntu21:1.21.0-1ubuntu11:1.21.0-1ubuntu1.41:1.21.0-1ubuntu1.4+esm1 |
None known |
busyboxUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1:1.22.0-15ubuntu11:1.22.0-15ubuntu1.41:1.22.0-15ubuntu1.4+esm11:1.22.0-15ubuntu1.4+esm2 |
None known |
busyboxUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 1:1.22.0-19ubuntu21:1.27.2-1ubuntu31:1.27.2-1ubuntu41:1.27.2-2ubuntu21:1.27.2-2ubuntu3 Show 5 moreShow less1:1.27.2-2ubuntu3.11:1.27.2-2ubuntu3.21:1.27.2-2ubuntu3.31:1.27.2-2ubuntu3.41:1.27.2-2ubuntu3.4+esm1 |
None known |
busyboxUbuntu:20.04:LTS |
All versions, plus listed versions 1:1.30.1-4ubuntu41:1.30.1-4ubuntu51:1.30.1-4ubuntu61:1.30.1-4ubuntu6.11:1.30.1-4ubuntu6.21:1.30.1-4ubuntu6.31:1.30.1-4ubuntu6.41:1.30.1-4ubuntu6.5 |
None known |
busyboxUbuntu:22.04:LTS |
All versions, plus listed versions 1:1.30.1-6ubuntu31:1.30.1-7ubuntu11:1.30.1-7ubuntu21:1.30.1-7ubuntu31:1.30.1-7ubuntu3.1 |
None known |
busyboxUbuntu:24.04:LTS |
All versions, plus listed versions 1:1.36.1-3ubuntu11:1.36.1-6ubuntu11:1.36.1-6ubuntu31:1.36.1-6ubuntu3.1 |
None known |
busyboxUbuntu:25.10 |
All versions, plus listed versions 1:1.37.0-4ubuntu1 |
None known |
busyboxUbuntu:26.10 |
All versions, plus listed versions 1:1.37.0-7ubuntu11:1.37.0-10.1ubuntu21:1.37.0-10.1ubuntu31:1.38.0-3ubuntu11:1.38.0-3ubuntu31:1.38.0-3ubuntu4 |
None known |
busyboxUbuntu:26.04:LTS |
All versions, plus listed versions 1:1.37.0-4ubuntu11:1.37.0-7ubuntu1 |
None known |
net-toolsopenSUSE:Tumbleweed |
before 3.14~alpha~git.20251212.7011617-1.1 | 3.14~alpha~git.20251212.7011617-1.1 |
busyboxopenSUSE:Tumbleweed From an advisory covering 8 CVEs |
before 1.38.0-4.1 | 1.38.0-4.1 |
net-toolsopenSUSE:Leap 16.0 |
before 2.10-160000.4.1 | 2.10-160000.4.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-58251 is a low vulnerability (CVSS 2.5) in Busybox, published April 23, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.18%, the 7th percentile. Fixed in busybox 1.36.1-r21.
References
busybox.net/downloads
bugs.busybox.net/show_bug.cgi?id=15922
openwall.com/lists/oss-security/2025/04/23/6
nvd.nist.gov/vuln/detail/CVE-2024-58251
github.com/advisories/GHSA-rrv5-483w-xmr9
Show 35 moreShow less
security.alpinelinux.org/vuln/CVE-2024-58251
docs.bell-sw.com/security/cves/CVE-2024-58251
security-tracker.debian.org/tracker/CVE-2024-58251
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2025-2328
suse.com/support/update/announcement/2026/suse-su-20261418-1
bugzilla.suse.com/1254324
ubuntu.com/security/CVE-2024-58251
cve.org/CVERecord?id=CVE-2024-58251