{"id":"CVE-2014-9645","aliases":["DEBIAN-CVE-2014-9645","DLA-1445-1","EUVD-2014-9455","GHSA-mm29-9f96-hjfh","MGASA-2015-0041","SUSE-SU-2015:1445-1","SUSE-SU-2022:4253-1","SUSE-SU-2022:4260-1","SUSE-SU-2022:4371-1","UBUNTU-CVE-2014-9645","USN-3935-1","openSUSE-SU-2024:12415-1"],"status":"published","title":"The add_probe function in modutils/modprobe.c in BusyBox before 1.23.0 allows local users to...","description":"The add_probe function in modutils/modprobe.c in BusyBox before 1.23.0 allows local users to bypass intended restrictions on loading kernel modules via a / (slash) character in a module name, as demonstrated by an \"ifconfig /usbserial up\" command or a \"mount -t /snd_pcm none /\" command.","severity":{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00635,"percentile":0.50706,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2015-01-27T21:08:29Z","modified":"2026-10-23T16:01:03Z","fixes":[{"ecosystem":"Debian:12","package":"busybox","fixed_in":["1:1.22.0-15"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"busybox","fixed_in":["1:1.22.0-15"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"busybox","fixed_in":["1:1.22.0-15"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"busybox","fixed_in":["1.21.1-3.2.mga4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"busybox","fixed_in":["1.21.1-3.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12","package":"busybox","fixed_in":["1.21.1-3.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"busybox","fixed_in":["1.21.1-3.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"busybox","fixed_in":["1:1.21.0-1ubuntu1.4"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"busybox","fixed_in":["1.35.0-6.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.22.0-15"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.22.0-15"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.22.0-15"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.22.0-9+deb8u2"}]}],"versions":["1:1.22.0-9+deb8u1","1:1.22.0-9+deb8u1+kbsd8u1"],"bundled":8},{"source":"osv","ecosystem":"Mageia:4","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.1-3.2.mga4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.1-3.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.1-3.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21.1-3.3"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-4.3.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-4.3.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-4.3.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-4.3.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-4.3.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-4.3.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-4.3.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-4.3.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150000.4.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150000.4.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150000.4.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150000.4.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150000.4.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150000.4.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150000.4.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150000.4.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150000.4.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150000.4.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150000.4.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150000.4.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150000.4.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150000.4.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150000.4.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150000.4.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150000.4.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150000.4.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150000.4.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150000.4.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150000.4.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150400.3.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150400.3.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"busybox-links","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150400.4.3.14"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.21.0-1ubuntu1.4"}]}],"versions":["1:1.20.0-8.1ubuntu1","1:1.20.0-9ubuntu1","1:1.20.0-9ubuntu2","1:1.21.0-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.21.0-1ubuntu1.4"}]}],"versions":["1:1.20.0-8.1ubuntu1","1:1.20.0-9ubuntu1","1:1.20.0-9ubuntu2","1:1.21.0-1ubuntu1"],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.22.0-15ubuntu1.4"}]}],"versions":["1:1.22.0-15ubuntu1"],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.27.2-2ubuntu3.2"}]}],"versions":["1:1.22.0-19ubuntu2","1:1.27.2-1ubuntu3","1:1.27.2-1ubuntu4","1:1.27.2-2ubuntu2","1:1.27.2-2ubuntu3","1:1.27.2-2ubuntu3.1"],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-6.1"}]}]}],"products":[{"vendor":"busybox","product":"busybox"}],"references":[{"url":"https://plus.google.com/+MathiasKrause/posts/PqFCo4bfrWu","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","advisory","fix"]},{"url":"https://bugs.busybox.net/show_bug.cgi?id=7652","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","report"]},{"url":"http://openwall.com/lists/oss-security/2015/01/24/4","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Patch","Third Party Advisory","advisory","article","fix"]},{"url":"https://security.gentoo.org/glsa/201503-13","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://www.securityfocus.com/bid/72324","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1185707","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/07/msg00037.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://git.busybox.net/busybox/commit/?id=4e314faa0aecb66717418e9a47a4451aec59262b","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","advisory","fix","report"]},{"url":"https://usn.ubuntu.com/3935-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"http://seclists.org/fulldisclosure/2020/Mar/15","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-9645"},{"url":"https://usn.ubuntu.com/3935-1"},{"url":"https://github.com/advisories/GHSA-mm29-9f96-hjfh"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-9645","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2015-0041.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=15133","tags":["report"]},{"url":"http://openwall.com/lists/oss-security/2015/01/26/1","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151445-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/914660","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9645","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20224253-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1029961","tags":["report"]},{"url":"https://bugzilla.suse.com/1064976","tags":["report"]},{"url":"https://bugzilla.suse.com/1064978","tags":["report"]},{"url":"https://bugzilla.suse.com/1069412","tags":["report"]},{"url":"https://bugzilla.suse.com/1099260","tags":["report"]},{"url":"https://bugzilla.suse.com/1099263","tags":["report"]},{"url":"https://bugzilla.suse.com/1102912","tags":["report"]},{"url":"https://bugzilla.suse.com/1121426","tags":["report"]},{"url":"https://bugzilla.suse.com/1121428","tags":["report"]},{"url":"https://bugzilla.suse.com/1184522","tags":["report"]},{"url":"https://bugzilla.suse.com/1191514","tags":["report"]},{"url":"https://bugzilla.suse.com/1192869","tags":["report"]},{"url":"https://bugzilla.suse.com/951562","tags":["report"]},{"url":"https://bugzilla.suse.com/970662","tags":["report"]},{"url":"https://bugzilla.suse.com/970663","tags":["report"]},{"url":"https://bugzilla.suse.com/991940","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2011-5325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-9261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2147","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2148","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15873","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15874","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000517","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20679","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-28831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-42373","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-42374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-42375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-42376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-42377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-42378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-42379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-42380","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-42381","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-42382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-42383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-42384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-42385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-42386","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20224260-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20224371-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1199744","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30065","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2014-9645","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3935-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-9645","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2011-5325","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-9261","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-2147","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-2148","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-15873","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-16544","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-20679","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-1000517","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-5747","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2014-9645","description":"The add_probe function in modutils/modprobe.c in BusyBox before 1.23.0 allows local users to bypass intended restrictions on loading kernel modules via a / (slash) character in a module name, as demonstrated by an \"ifconfig /usbserial up\" command or a \"mount -t /snd_pcm none /\" command.","status":"published","published":"2017-03-12T06:05:00Z","modified":"2024-08-06T13:47:41.807Z","updated_at":"2026-11-02T14:33:42.882687Z"}],"euvd":[{"id":"EUVD-2014-9455","description":"The add_probe function in modutils/modprobe.c in BusyBox before 1.23.0 allows local users to bypass intended restrictions on loading kernel modules via a / (slash) character in a module name, as demonstrated by an \"ifconfig /usbserial up\" command or a \"mount -t /snd_pcm none /\" command.","status":"published","published":"2017-03-12T06:05:00Z","modified":"2024-08-06T13:47:41Z","updated_at":"2026-11-03T01:56:48.455518Z"}],"ghsa":[{"id":"GHSA-mm29-9f96-hjfh","title":"The add_probe function in modutils/modprobe.c in BusyBox before 1.23.0 allows local users to...","description":"The add_probe function in modutils/modprobe.c in BusyBox before 1.23.0 allows local users to bypass intended restrictions on loading kernel modules via a / (slash) character in a module name, as demonstrated by an \"ifconfig /usbserial up\" command or a \"mount -t /snd_pcm none /\" command.","status":"published","published":"2022-05-14T01:13:35Z","modified":"2025-04-20T03:35:03Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:01:42.453698Z"}],"nvd":[{"id":"CVE-2014-9645","description":"The add_probe function in modutils/modprobe.c in BusyBox before 1.23.0 allows local users to bypass intended restrictions on loading kernel modules via a / (slash) character in a module name, as demonstrated by an \"ifconfig /usbserial up\" command or a \"mount -t /snd_pcm none /\" command.","status":"published","published":"2017-03-12T06:59:00.147Z","modified":"2026-06-17T00:18:42.447Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:02:58.385843Z"}],"osv":[{"id":"CVE-2014-9645","description":"The add_probe function in modutils/modprobe.c in BusyBox before 1.23.0 allows local users to bypass intended restrictions on loading kernel modules via a / (slash) character in a module name, as demonstrated by an \"ifconfig /usbserial up\" command or a \"mount -t /snd_pcm none /\" command.","status":"published","published":"2017-03-12T06:59:00Z","modified":"2026-04-16T06:15:11.329539886Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:00.097545Z"},{"id":"DEBIAN-CVE-2014-9645","description":"The add_probe function in modutils/modprobe.c in BusyBox before 1.23.0 allows local users to bypass intended restrictions on loading kernel modules via a / (slash) character in a module name, as demonstrated by an \"ifconfig /usbserial up\" command or a \"mount -t /snd_pcm none /\" command.","status":"published","published":"2017-03-12T06:59:00.147Z","modified":"2026-10-23T16:01:03.043808508Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:26.442161Z"},{"id":"UBUNTU-CVE-2014-9645","description":"The add_probe function in modutils/modprobe.c in BusyBox before 1.23.0 allows local users to bypass intended restrictions on loading kernel modules via a / (slash) character in a module name, as demonstrated by an \"ifconfig /usbserial up\" command or a \"mount -t /snd_pcm none /\" command.","status":"published","published":"2017-03-12T00:00:00Z","modified":"2026-02-04T04:03:01.757868Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:09.378953Z"},{"id":"DLA-1445-1","title":"busybox - security update","status":"published","published":"2018-07-27T00:00:00Z","modified":"2026-03-09T01:01:25.820165Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"MGASA-2015-0041","title":"Updated busybox packages fix CVE-2014-9645","description":"Updated busybox packages fix security vulnerability:\n\nThe modprobe command in busybox before 1.23.0 uses the basename of the module\nargument as the module to load, allowing arbitrary modules, even when some\nkernel subsystems try to prevent this (CVE-2014-9645).\n","status":"published","published":"2015-01-27T21:08:29Z","modified":"2026-04-16T06:24:51.003423315Z","updated_at":"2026-11-02T15:49:39.488462Z"},{"id":"openSUSE-SU-2024:12415-1","title":"busybox-1.35.0-6.1 on GA media","description":"These are all security issues fixed in the busybox-1.35.0-6.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:21:43.829829Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"SUSE-SU-2015:1445-1","title":"Security update for busybox","description":"-The following issues are fixed by this update:\n      CVE-2014-9645: do not allow / in module names to avoid loading bad modules (bnc#914660)\n","status":"published","published":"2015-07-31T15:07:28Z","modified":"2026-02-04T03:03:38.69869Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2022:4253-1","title":"Security update for busybox","description":"This update for busybox fixes the following issues:\n\n- CVE-2014-9645: Fixed loading of unwanted modules with / (bsc#914660).\n- CVE-2017-16544: Fixed insufficient sanitization of filenames when autocompleting  (bsc#1069412).\n- CVE-2015-9261: Fixed huft_build misuses a pointer, causing segfaults (bsc#1102912).\n- CVE-2016-2147: Fixed out of bounds write (heap) due to integer underflow in udhcpc (bsc#970663).\n- CVE-2016-2148: Fixed heap-based buffer overflow in OPTION_6RD parsing (bsc#970662).\n- CVE-2016-6301: Fixed NTP server denial of service flaw (bsc#991940).\n- CVE-2017-15873: Fixed integer overflow in  get_next_block function in archival/libarchive/decompress_bunzip2.c (bsc#1064976).\n- CVE-2017-15874: Fixed integer overflow in archival/libarchive/decompress_unlzma (bsc#1064978).\n- CVE-2019-5747: Fixed out of bounds read in udhcp components (bsc#1121428).\n- CVE-2021-42373, CVE-2021-42374, CVE-2021-42375, CVE-2021-42376, CVE-2021-42377, CVE-2021-42378, CVE-2021-42379, CVE-2021-42380, CVE-2021-42381, CVE-2021-42382, CVE-2021-42383, CVE-2021-42384, CVE-2021-42385, CVE-2021-42386: v1.34.0 bugfixes (bsc#1192869).\n- CVE-2021-28831: Fixed invalid free or segmentation fault via malformed gzip data (bsc#1184522).\n- CVE-2018-20679: Fixed out of bounds read in udhcp (bsc#1121426).\n- CVE-2018-1000517: Fixed heap-based buffer overflow in the retrieve_file_data() (bsc#1099260).\n- CVE-2011-5325: Fixed tar directory traversal (bsc#951562).\n- CVE-2018-1000500: Fixed missing SSL certificate validation in wget (bsc#1099263).\n  \n- Update to 1.35.0\n  - awk: fix printf %%, fix read beyond end of buffer\n  - chrt: silence analyzer warning\n  - libarchive: remove duplicate forward declaration\n  - mount: 'mount -o rw ....' should not fall back to RO mount\n  - ps: fix -o pid=PID,args interpreting entire 'PID,args' as header\n  - tar: prevent malicious archives with long name sizes causing OOM\n  - udhcpc6: fix udhcp_find_option to actually find DHCP6 options\n  - xxd: fix -p -r\n  - support for new optoins added to basename, cpio, date, find, \n    mktemp, wget and others\n\n- Enable fdisk (jsc#CAR-16)\n\n- Update to 1.34.1:\n  * build system: use SOURCE_DATE_EPOCH for timestamp if available\n  * many bug fixes and new features\n  * touch: make FEATURE_TOUCH_NODEREF unconditional\n  \n- update to 1.33.1:\n  * httpd: fix sendfile\n  * ash: fix HISTFILE corruptio\n  * ash: fix unset variable pattern expansion\n  * traceroute: fix option parsing\n  * gunzip: fix for archive corruption\n\n- Update to version 1.33.0\n  - many bug fixes and new features\n\n- Update to version 1.32.1\n  - fixes a case where in ash, 'wait' never finishes. \n\n- prepare usrmerge (bsc#1029961)\n\n- Enable testsuite and package it for later rerun (for QA, jsc#CAR-15)\n\n- Update to version 1.31.1:\n  + Bug fix release. 1.30.1 has fixes for dc, ash (PS1 expansion\n    fix), hush, dpkg-deb, telnet and wget.\n- Changes from version 1.31.0:\n  + many bugfixes and new features.\n- Add busybox-no-stime.patch: stime() has been deprecated in glibc\n  2.31 and replaced with clock_settime().\n\n- update to 1.25.1:\n  * fixes for hush, gunzip, ip route, ntpd\n- includes changes from 1.25.0:\n  * many added and expanded implementations of command options\n- includes changes from 1.24.2:\n  * fixes for build system (static build with glibc fixed),\n    truncate, gunzip and unzip. \n\n- Update to version 1.24.1\n  * for a full list of changes see http://www.busybox.net/news.html\n- Refresh busybox.install.patch \n\n- Update to 1.23.2\n  * for a full list of changes see http://www.busybox.net/news.html\n- Cleaned up spec file with spec-cleaner\n- Refreshed patches\n\n- update to 1.22.1:\n  Many updates and fixes for most included tools, see\n  see http://www.busybox.net/news.html\n","status":"published","published":"2022-11-28T10:23:47Z","modified":"2026-02-04T02:22:08.067242Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2022:4260-1","title":"Security update for busybox","description":"This update for busybox fixes the following issues:\n\n- CVE-2014-9645: Fixed loading of unwanted module with / in module names (bsc#914660).\n\n- Enable switch_root\n  With this change virtme --force-initramfs works as expected.\n\n- Enable udhcpc\n\nUpdate to 1.35.0:\n    \n- awk: fix printf %%, fix read beyond end of buffer\n- Adjust busybox.config for new features in find, date and cpio \n- chrt: silence analyzer warning\n- libarchive: remove duplicate forward declaration\n- mount: 'mount -o rw ....' should not fall back to RO mount\n- ps: fix -o pid=PID,args interpreting entire 'PID,args' as header\n- tar: prevent malicious archives with long name sizes causing OOM\n- udhcpc6: fix udhcp_find_option to actually find DHCP6 options\n- xxd: fix -p -r\n- support for new optoins added to basename, cpio, date, find, \n  mktemp, wget and others\n\n- Adjust busybox.config for new features in find, date and cpio \n","status":"published","published":"2022-11-28T16:11:01Z","modified":"2026-02-04T04:05:26.265173Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2022:4371-1","title":"Security update for busybox","description":"This update for busybox fixes the following issues:\n\n- CVE-2022-30065: Fixed use-after-free in the AWK applet (bsc#1199744). \n- CVE-2014-9645: Fixed loading of unwanted module with / in module names (bsc#914660).\n\n- Update to 1.35.0 also introduced:\n  - awk: fix printf %%, fix read beyond end of buffer\n  - chrt: silence analyzer warning\n  - libarchive: remove duplicate forward declaration\n  - mount: 'mount -o rw ....' should not fall back to RO mount\n  - ps: fix -o pid=PID,args interpreting entire 'PID,args' as header\n  - tar: prevent malicious archives with long name sizes causing OOM\n  - udhcpc6: fix udhcp_find_option to actually find DHCP6 options\n  - xxd: fix -p -r\n  - support for new optoins added to basename, cpio, date, find, \n    mktemp, wget and others\n","status":"published","published":"2022-12-08T16:19:54Z","modified":"2026-02-04T04:22:58.818215Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"USN-3935-1","title":"busybox vulnerabilities","description":"Tyler Hicks discovered that BusyBox incorrectly handled symlinks inside tar\narchives. If a user or automated system were tricked into processing a\nspecially crafted tar archive, a remote attacker could overwrite arbitrary\nfiles outside of the current directory. This issue only affected Ubuntu\n14.04 LTS and Ubuntu 16.04 LTS. (CVE-2011-5325)\n\nMathias Krause discovered that BusyBox incorrectly handled kernel module\nloading restrictions. A local attacker could possibly use this issue to\nbypass intended restrictions. This issue only affected Ubuntu 14.04 LTS.\n(CVE-2014-9645)\n\nIt was discovered that BusyBox incorrectly handled certain ZIP archives. If\na user or automated system were tricked into processing a specially crafted\nZIP archive, a remote attacker could cause BusyBox to crash, leading to a\ndenial of service. This issue only affected Ubuntu 14.04 LTS and Ubuntu\n16.04 LTS. (CVE-2015-9261)\n\nNico Golde discovered that the BusyBox DHCP client incorrectly handled\ncertain malformed domain names. A remote attacker could possibly use this\nissue to cause the DHCP client to crash, leading to a denial of service.\nThis issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS.\n(CVE-2016-2147)\n\nNico Golde discovered that the BusyBox DHCP client incorrectly handled\ncertain 6RD options. A remote attacker could use this issue to cause the\nDHCP client to crash, leading to a denial of service, or possibly execute\narbitrary code. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04\nLTS. (CVE-2016-2148)\n\nIt was discovered that BusyBox incorrectly handled certain bzip2 archives.\nIf a user or automated system were tricked into processing a specially\ncrafted bzip2 archive, a remote attacker could cause BusyBox to crash,\nleading to a denial of service, or possibly execute arbitrary code. This\nissue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2017-15873)\n\nIt was discovered that BusyBox incorrectly handled tab completion. A local\nattacker could possibly use this issue to execute arbitrary code. This\nissue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2017-16544)\n\nIt was discovered that the BusyBox wget utility incorrectly handled certain\nresponses. A remote attacker could use this issue to cause BusyBox to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode. (CVE-2018-1000517)\n\nIt was discovered that the BusyBox DHCP utilities incorrectly handled\ncertain memory operations. A remote attacker could possibly use this issue\nto access sensitive information. (CVE-2018-20679, CVE-2019-5747)\n","status":"published","published":"2019-04-03T11:59:48Z","modified":"2026-02-10T04:41:31Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}