{"id":"CVE-2024-58251","aliases":["ALPINE-CVE-2024-58251","AZL-60933","AZL-61217","BELL-CVE-2024-58251","DEBIAN-CVE-2024-58251","EUVD-2025-12151","GHSA-rrv5-483w-xmr9","OESA-2025-2328","SUSE-SU-2026:1418-1","SUSE-SU-2026:21572-1","SUSE-SU-2026:21582-1","SUSE-SU-2026:21679-1","SUSE-SU-2026:21737-1","SUSE-SU-2026:22862-1","SUSE-SU-2026:22936-1","SUSE-SU-2026:23037-1","SUSE-SU-2026:23076-1","SUSE-SU-2026:2620-1","SUSE-SU-2026:3150-1","SUSE-SU-2026:3222-1","SUSE-SU-2026:3223-1","UBUNTU-CVE-2024-58251","openSUSE-SU-2026:10679-1","openSUSE-SU-2026:12376-1","openSUSE-SU-2026:20696-1","openSUSE-SU-2026:21429-1"],"status":"published","title":"In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv...","description":"In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.","severity":{"version":"3.1","score":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00178,"percentile":0.07447,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-150"],"published":"2025-04-23T00:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Alpine:v3.19","package":"busybox","fixed_in":["1.36.1-r21"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"busybox","fixed_in":["1.36.1-r31"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"busybox","fixed_in":["1.37.0-r14"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"busybox","fixed_in":["1.37.0-r20"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"busybox","fixed_in":["1.37.0-r24"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"busybox","fixed_in":["1.37.0-r24"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"busybox","fixed_in":["1.35.0-r36"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"busybox","fixed_in":["1.37.0-r24"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"busybox","fixed_in":["1.37.0-r28"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"busybox","fixed_in":["1.35.0-r36"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"busybox","fixed_in":["1.37.0-r24"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"busybox","fixed_in":["1.37.0-r28"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"busybox","fixed_in":["1:1.37.0-9"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"busybox","fixed_in":["1.34.1-26.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"busybox","fixed_in":["1.36.1-12.oe2403sp2"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"busybox","fixed_in":["1.36.1-12.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP2","package":"busybox","fixed_in":["1.36.1-12.oe2403sp2"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"busybox","fixed_in":["1.31.1-26.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"busybox","fixed_in":["1.34.1-26.oe2203sp3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"iproute2","fixed_in":["6.4-150600.7.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"net-tools","fixed_in":["2.10-160000.4.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"net-tools","fixed_in":["2.10-160000.4.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.2","package":"net-tools","fixed_in":["2.10-160000.4.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"net-tools","fixed_in":["2.10-5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.1","package":"net-tools","fixed_in":["2.10-slfo.1.1_3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"iproute2","fixed_in":["5.14-150400.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"iproute2","fixed_in":["5.14-150400.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"iproute2","fixed_in":["5.14-150400.3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"iproute2","fixed_in":["4.12-16.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"net-tools","fixed_in":["1.60-765.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"net-tools","fixed_in":["2.0+git20170221.479bb4a-150000.5.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"net-tools","fixed_in":["2.0+git20170221.479bb4a-150000.5.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"net-tools","fixed_in":["2.0+git20170221.479bb4a-150000.5.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"net-tools","fixed_in":["2.0+git20170221.479bb4a-150000.5.18.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP7","package":"net-tools","fixed_in":["2.0+git20170221.479bb4a-150000.5.18.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"net-tools","fixed_in":["3.14~alpha~git.20251212.7011617-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 16.0","package":"net-tools","fixed_in":["2.10-160000.4.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.19","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36.1-r21"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36.1-r31"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.37.0-r14"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.37.0-r20"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.37.0-r24"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.37.0-r24"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.36.1-28"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.35.0-18"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.35.0-r29"},{"fixed":"1.35.0-r36"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.37.0-r20"},{"fixed":"1.37.0-r24"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.36.1-r1"},{"fixed":"1.37.0-r28"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.35.0-r29"},{"fixed":"1.35.0-r36"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.37.0-r20"},{"fixed":"1.37.0-r24"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.36.1-r1"},{"fixed":"1.37.0-r28"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.35.0-4","1:1.35.0-4+deb12u1","1:1.36.0-1~exp1","1:1.36.1-1","1:1.36.1-2","1:1.36.1-3","1:1.36.1-3.1","1:1.36.1-4","1:1.36.1-5","1:1.36.1-6","1:1.36.1-6~exp.1","1:1.36.1-7","1:1.36.1-8","1:1.36.1-9","1:1.37.0-1","1:1.37.0-10","1:1.37.0-10.1","1:1.37.0-2","1:1.37.0-3","1:1.37.0-4","1:1.37.0-5","1:1.37.0-6","1:1.37.0-7","1:1.37.0-8","1:1.37.0-9","1:1.38.0-1","1:1.38.0-2","1:1.38.0-3"]},{"source":"osv","ecosystem":"Debian:13","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.37.0-10","1:1.37.0-10.1","1:1.37.0-6","1:1.37.0-7","1:1.37.0-8","1:1.37.0-9","1:1.38.0-1","1:1.38.0-2","1:1.38.0-3"]},{"source":"osv","ecosystem":"Debian:14","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.37.0-9"}]}],"versions":["1:1.37.0-6","1:1.37.0-7","1:1.37.0-8"]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.34.1-26.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36.1-12.oe2403sp2"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36.1-12.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36.1-12.oe2403sp2"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.31.1-26.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.34.1-26.oe2203sp3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"iproute2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4-150600.7.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-160000.4.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-160000.4.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-160000.4.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-slfo.1.1_3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"iproute2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14-150400.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"iproute2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14-150400.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"iproute2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.14-150400.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"iproute2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12-16.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.60-765.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0+git20170221.479bb4a-150000.5.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0+git20170221.479bb4a-150000.5.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0+git20170221.479bb4a-150000.5.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0+git20170221.479bb4a-150000.5.18.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP7","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0+git20170221.479bb4a-150000.5.18.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.20.0-8.1ubuntu1","1:1.20.0-9ubuntu1","1:1.20.0-9ubuntu2","1:1.21.0-1ubuntu1","1:1.21.0-1ubuntu1.4","1:1.21.0-1ubuntu1.4+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.22.0-15ubuntu1","1:1.22.0-15ubuntu1.4","1:1.22.0-15ubuntu1.4+esm1","1:1.22.0-15ubuntu1.4+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.22.0-19ubuntu2","1:1.27.2-1ubuntu3","1:1.27.2-1ubuntu4","1:1.27.2-2ubuntu2","1:1.27.2-2ubuntu3","1:1.27.2-2ubuntu3.1","1:1.27.2-2ubuntu3.2","1:1.27.2-2ubuntu3.3","1:1.27.2-2ubuntu3.4","1:1.27.2-2ubuntu3.4+esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.30.1-4ubuntu4","1:1.30.1-4ubuntu5","1:1.30.1-4ubuntu6","1:1.30.1-4ubuntu6.1","1:1.30.1-4ubuntu6.2","1:1.30.1-4ubuntu6.3","1:1.30.1-4ubuntu6.4","1:1.30.1-4ubuntu6.5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.30.1-6ubuntu3","1:1.30.1-7ubuntu1","1:1.30.1-7ubuntu2","1:1.30.1-7ubuntu3","1:1.30.1-7ubuntu3.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.36.1-3ubuntu1","1:1.36.1-6ubuntu1","1:1.36.1-6ubuntu3","1:1.36.1-6ubuntu3.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.37.0-4ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.37.0-7ubuntu1","1:1.37.0-10.1ubuntu2","1:1.37.0-10.1ubuntu3","1:1.38.0-3ubuntu1","1:1.38.0-3ubuntu3","1:1.38.0-3ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.37.0-4ubuntu1","1:1.37.0-7ubuntu1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.14~alpha~git.20251212.7011617-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.38.0-4.1"}]}],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-160000.4.1"}]}]}],"products":[{"vendor":"busybox","product":"busybox"}],"references":[{"url":"https://www.busybox.net/downloads/","tags":["web"]},{"url":"https://www.busybox.net","tags":["web"]},{"url":"https://bugs.busybox.net/show_bug.cgi?id=15922","tags":["web"]},{"url":"http://www.openwall.com/lists/oss-security/2025/04/23/6","tags":["web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-58251","tags":["web","advisory"]},{"url":"https://www.busybox.net/downloads"},{"url":"https://github.com/advisories/GHSA-rrv5-483w-xmr9"},{"url":"https://security.alpinelinux.org/vuln/CVE-2024-58251","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2024-58251","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-58251","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2328","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261418-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1254324","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-58251","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621572-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1241316","tags":["report"]},{"url":"https://bugzilla.suse.com/1253044","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621582-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621679-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1204562","tags":["report"]},{"url":"https://bugzilla.suse.com/1234383","tags":["report"]},{"url":"https://bugzilla.suse.com/1243005","tags":["report"]},{"url":"https://bugzilla.suse.com/1248660","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621737-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622862-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1254323","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622936-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623037-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623076-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262620-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263150-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263222-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263223-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-58251","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-58251","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-108119","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-88829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-88833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-88834","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-88842","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-90954","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-92205","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2024-58251","description":"In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.","status":"published","published":"2025-04-23T00:00:00Z","modified":"2025-04-23T23:02:52.982Z","cvss":[{"version":"3.1","score":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low","assessor":"cna"}],"cwes":["CWE-150"],"updated_at":"2026-11-02T14:34:08.843708Z"}],"euvd":[{"id":"EUVD-2025-12151","description":"In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.","status":"published","published":"2025-04-23T00:00:00Z","modified":"2025-04-23T23:02:52Z","cvss":[{"version":"3.1","score":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T20:52:05.311873Z"}],"ghsa":[{"id":"GHSA-rrv5-483w-xmr9","title":"In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv...","description":"In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.","status":"published","published":"2025-04-23T18:31:00Z","modified":"2025-04-24T00:32:20Z","cvss":[{"version":"3.1","score":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-150"],"updated_at":"2026-11-02T15:02:00.72042Z"}],"nvd":[{"id":"CVE-2024-58251","description":"In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.","status":"published","published":"2025-04-23T18:16:03.057Z","modified":"2026-06-17T08:14:42.853Z","cvss":[{"version":"3.1","score":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low","assessor":"secondary"}],"cwes":["CWE-150"],"updated_at":"2026-11-02T14:10:46.40251Z"}],"osv":[{"id":"ALPINE-CVE-2024-58251","description":"In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.","status":"published","published":"2025-04-23T18:16:03.057Z","modified":"2026-11-02T11:17:50.132564464Z","cvss":[{"version":"3.1","score":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:27:49.709457Z"},{"id":"BELL-CVE-2024-58251","status":"published","published":"2025-04-25T05:59:56.924672Z","modified":"2026-01-26T09:37:09.244329Z","cvss":[{"version":"3.1","score":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:28:21.227396Z"},{"id":"DEBIAN-CVE-2024-58251","description":"In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.","status":"published","published":"2025-04-23T18:16:03.057Z","modified":"2026-11-02T12:03:11.677639969Z","cvss":[{"version":"3.1","score":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:45:44.747956Z"},{"id":"OESA-2025-2328","title":"busybox security update","description":"BusyBox combines tiny versions of many common UNIX utilities into a single small executable. It provides replacements for most of the utilities you usually find in GNU fileutils, shellutils, etc. It provides a fairly complete environment for any small or embedded system.\r\n\r\nSecurity Fix(es):\n\nIn netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.(CVE-2024-58251)","status":"published","published":"2025-09-26T11:09:23Z","modified":"2026-08-18T01:19:11.60053579Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"UBUNTU-CVE-2024-58251","description":"In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.","status":"published","published":"2025-04-23T18:16:00Z","modified":"2026-10-17T12:56:40.501003672Z","cvss":[{"version":"3.1","score":2.5,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T16:55:18.664792Z"},{"id":"AZL-60933","title":"CVE-2024-58251 affecting package busybox 1.36.1-28","description":"In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.","status":"published","published":"2025-04-23T18:16:03Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:21.344052Z"},{"id":"AZL-61217","title":"CVE-2024-58251 affecting package busybox 1.35.0-18","description":"In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.","status":"published","published":"2025-04-23T18:16:03Z","modified":"2026-04-21T04:37:29.583214Z","updated_at":"2026-11-02T15:28:07.517393Z"},{"id":"CVE-2024-58251","description":"In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.","status":"published","published":"2025-04-23T18:16:03Z","modified":"2026-11-02T12:26:58.880475192Z","updated_at":"2026-11-02T15:44:45.107804Z"},{"id":"openSUSE-SU-2026:10679-1","title":"net-tools-3.14~alpha~git.20251212.7011617-1.1 on GA media","description":"These are all security issues fixed in the net-tools-3.14~alpha~git.20251212.7011617-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-05-04T00:00:00Z","modified":"2026-05-05T07:46:38.369277Z","updated_at":"2026-11-02T16:58:38.415593Z"},{"id":"openSUSE-SU-2026:12376-1","title":"busybox-1.38.0-4.1 on GA media","description":"These are all security issues fixed in the busybox-1.38.0-4.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-11-01T00:00:00Z","modified":"2026-11-02T12:15:05.284080191Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"openSUSE-SU-2026:20696-1","title":"Security update for iproute2","description":"This update for iproute2 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2024-58251: terminal lock up via ANSI terminal escape sequence set in `argv[0]` (bsc#1254324).\n\nOther updates and bugfixes:\n\n- Fix package for immutable mode (jsc#PED-14787).\n- Add netshaper support (bsc#1253044).\n- Add follow-up fixes included by upstream after the 6.12 release (bsc#1241316):\n  * Parse FQ band weights correctly\n  * bond: fix stack smash in xstats\n  * ip: support setting multiple features\n  * tc: gred: fix debug print\n","status":"published","published":"2026-05-07T07:31:57Z","modified":"2026-05-09T18:24:22.487139Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"openSUSE-SU-2026:21429-1","title":"Security update for net-tools","description":"This update for net-tools fixes the following issue:\n\n- CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254323).\n","status":"published","published":"2026-07-23T03:40:54Z","modified":"2026-07-24T17:16:08.644158025Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"SUSE-SU-2026:1418-1","title":"Security update for iproute2","description":"This update for iproute2 fixes the following issue:\n\n- CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254324).\n","status":"published","published":"2026-04-16T16:43:07Z","modified":"2026-04-18T08:00:07.151221Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:21572-1","title":"Security update for iproute2","description":"This update for iproute2 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2024-58251: terminal lock up via ANSI terminal escape sequence set in `argv[0]` (bsc#1254324).\n\nOther updates and bugfixes:\n\n- Fix package for immutable mode (jsc#PED-14787).\n- Add netshaper support (bsc#1253044).\n- Add follow-up fixes included by upstream after the 6.12 release (bsc#1241316):\n  * Parse FQ band weights correctly\n  * bond: fix stack smash in xstats\n  * ip: support setting multiple features\n  * tc: gred: fix debug print\n","status":"published","published":"2026-05-07T07:30:16Z","modified":"2026-05-12T18:27:42.664332Z","updated_at":"2026-11-02T15:54:02.312556Z"},{"id":"SUSE-SU-2026:21582-1","title":"Security update for iproute2","description":"This update for iproute2 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2024-58251: terminal lock up via ANSI terminal escape sequence set in `argv[0]` (bsc#1254324).\n\nOther updates and bugfixes:\n\n- Fix package for immutable mode (jsc#PED-14787).\n- Add netshaper support (bsc#1253044).\n- Add follow-up fixes included by upstream after the 6.12 release (bsc#1241316):\n  * Parse FQ band weights correctly\n  * bond: fix stack smash in xstats\n  * ip: support setting multiple features\n  * tc: gred: fix debug print\n","status":"published","published":"2026-05-07T07:30:16Z","modified":"2026-05-16T18:24:28.318208Z","updated_at":"2026-11-02T15:54:02.312556Z"},{"id":"SUSE-SU-2026:21679-1","title":"Security update for iproute2","description":"This update for iproute2 fixes the following issue\n\n- CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254324).\n\nChanges for iproute2:\n\n- support display of bound but unconnected sockets (bsc#1204562).\n- avoid spurious cgroup warning (bsc#1234383).\n- add post-6.4 follow-up fixes (bsc#1243005).\n- devlink: support ipsec_crypto and ipsec_packet cap (bsc#1248660).\n","status":"published","published":"2026-05-15T10:44:29Z","modified":"2026-05-20T18:23:55.797172458Z","updated_at":"2026-11-02T15:54:02.654057Z"},{"id":"SUSE-SU-2026:21737-1","title":"Security update for iproute2","description":"This update for iproute2 fixes the following issue\n\n- CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254324).\n\nChanges for iproute2:\n\n- support display of bound but unconnected sockets (bsc#1204562).\n- avoid spurious cgroup warning (bsc#1234383).\n- add post-6.4 follow-up fixes (bsc#1243005).\n- devlink: support ipsec_crypto and ipsec_packet cap (bsc#1248660).\n","status":"published","published":"2026-05-20T11:02:36Z","modified":"2026-05-23T18:23:41.734860363Z","updated_at":"2026-11-02T15:54:02.654057Z"},{"id":"SUSE-SU-2026:22862-1","title":"Security update for net-tools","description":"This update for net-tools fixes the following issue:\n\n- CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254323).\n","status":"published","published":"2026-07-23T03:41:17Z","modified":"2026-07-28T18:24:11.741528327Z","updated_at":"2026-11-02T15:54:03.080707Z"},{"id":"SUSE-SU-2026:22936-1","title":"Security update for net-tools","description":"This update for net-tools fixes the following issue:\n\n- CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254323).\n","status":"published","published":"2026-07-23T03:41:17Z","modified":"2026-07-29T18:24:21.832866505Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:23037-1","title":"Security update for net-tools","description":"This update for net-tools fixes the following issues:\n\n- CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254323).\n","status":"published","published":"2026-07-29T09:39:58Z","modified":"2026-08-12T18:23:38.856000737Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:23076-1","title":"Security update for net-tools","description":"This update for net-tools fixes the following issues:\n\n- CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254323).\n","status":"published","published":"2026-08-03T07:33:54Z","modified":"2026-08-14T18:23:35.791478069Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:2620-1","title":"Security update for iproute2","description":"This update for iproute2 fixes the following issue\n\n- CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254324).\n\nOther updates:\n\n- support display of bound but unconnected sockets (bsc#1204562)\n","status":"published","published":"2026-06-24T09:04:18Z","modified":"2026-06-25T06:15:06.871811598Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:3150-1","title":"Security update for iproute2","description":"This update for iproute2 fixes the following issue\n\n- CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254324).\n","status":"published","published":"2026-07-21T12:46:50Z","modified":"2026-07-22T09:30:07.54008049Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:3222-1","title":"Security update for net-tools","description":"This update for net-tools fixes the following issues:\n\n- CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254323).\n","status":"published","published":"2026-07-23T18:30:38Z","modified":"2026-07-24T17:16:07.391184833Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:3223-1","title":"Security update for net-tools","description":"This update for net-tools fixes the following issues:\n\n- CVE-2024-58251: denial of service via terminal escape sequences (bsc#1254323).\n","status":"published","published":"2026-07-23T18:31:54Z","modified":"2026-07-24T17:16:07.595188408Z","updated_at":"2026-11-02T15:54:04.987808Z"}]}}