{"id":"CVE-2026-38754","aliases":["AZL-92484","BELL-CVE-2026-38754","CLSA-2026-1787062482","DEBIAN-CVE-2026-38754","EUVD-2026-44850","GHSA-jj7c-h3wm-vjfw","OESA-2026-3312","RHSA-2026:41130","SUSE-SU-2026:23446-1","SUSE-SU-2026:24154-1","SUSE-SU-2026:3900-1","SUSE-SU-2026:3933-1","UBUNTU-CVE-2026-38754","openSUSE-SU-2026:11605-1","openSUSE-SU-2026:22040-1"],"status":"published","title":"A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to...","description":"A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.","severity":{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00235,"percentile":0.14558,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122","CWE-125"],"published":"2026-07-15T00:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Azure Linux:3","package":"busybox","fixed_in":["1.36.1-26"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"busybox","fixed_in":["1.35.0-r41"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"busybox","fixed_in":["1.37.0-r28"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"busybox","fixed_in":["1.38.0-r1"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"busybox","fixed_in":["1.35.0-r41"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"busybox","fixed_in":["1.37.0-r28"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"busybox","fixed_in":["1.38.0-r1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"busybox","fixed_in":["1:1.38.0-3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36.1-26"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.35.0-r29"},{"fixed":"1.35.0-r41"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.37.0-r20"},{"fixed":"1.37.0-r28"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.36.1-r1"},{"fixed":"1.38.0-r1"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.35.0-r29"},{"fixed":"1.35.0-r41"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.37.0-r20"},{"fixed":"1.37.0-r28"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.36.1-r1"},{"fixed":"1.38.0-r1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.30.1-4+tuxcare.els4"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"busybox-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.30.1-4+tuxcare.els4"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"busybox-syslogd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.30.1-4+tuxcare.els4"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"udhcpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.30.1-4+tuxcare.els4"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"udhcpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.30.1-4+tuxcare.els4"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.35.0-4","1:1.35.0-4+deb12u1","1:1.36.0-1~exp1","1:1.36.1-1","1:1.36.1-2","1:1.36.1-3","1:1.36.1-3.1","1:1.36.1-4","1:1.36.1-5","1:1.36.1-6","1:1.36.1-6~exp.1","1:1.36.1-7","1:1.36.1-8","1:1.36.1-9","1:1.37.0-1","1:1.37.0-10","1:1.37.0-10.1","1:1.37.0-2","1:1.37.0-3","1:1.37.0-4","1:1.37.0-5","1:1.37.0-6","1:1.37.0-7","1:1.37.0-8","1:1.37.0-9","1:1.38.0-1","1:1.38.0-2","1:1.38.0-3"]},{"source":"osv","ecosystem":"Debian:13","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.37.0-10","1:1.37.0-10.1","1:1.37.0-6","1:1.37.0-7","1:1.37.0-8","1:1.37.0-9","1:1.38.0-1","1:1.38.0-2","1:1.38.0-3"]},{"source":"osv","ecosystem":"Debian:14","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.38.0-3"}]}],"versions":["1:1.37.0-10","1:1.37.0-10.1","1:1.37.0-6","1:1.37.0-7","1:1.37.0-8","1:1.37.0-9","1:1.38.0-1","1:1.38.0-2"]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36.1-21.oe2403sp1"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36.1-21.oe2403sp3"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36.1-21.oe2403sp4"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.31.1-35.oe2003sp4"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.34.1-34.oe2203sp4"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.37.0-8.1.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"busybox-petitboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.37.0-8.1.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"busybox-shared","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.37.0-8.1.hum1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.36.1-5.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.37.0-160000.7.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.37.0-160000.7.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-10.9.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.37.0-150700.18.21.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.20.0-8.1ubuntu1","1:1.20.0-9ubuntu1","1:1.20.0-9ubuntu2","1:1.21.0-1ubuntu1","1:1.21.0-1ubuntu1.4","1:1.21.0-1ubuntu1.4+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.22.0-15ubuntu1","1:1.22.0-15ubuntu1.4","1:1.22.0-15ubuntu1.4+esm1","1:1.22.0-15ubuntu1.4+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.22.0-19ubuntu2","1:1.27.2-1ubuntu3","1:1.27.2-1ubuntu4","1:1.27.2-2ubuntu2","1:1.27.2-2ubuntu3","1:1.27.2-2ubuntu3.1","1:1.27.2-2ubuntu3.2","1:1.27.2-2ubuntu3.3","1:1.27.2-2ubuntu3.4","1:1.27.2-2ubuntu3.4+esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.30.1-4ubuntu4","1:1.30.1-4ubuntu5","1:1.30.1-4ubuntu6","1:1.30.1-4ubuntu6.1","1:1.30.1-4ubuntu6.2","1:1.30.1-4ubuntu6.3","1:1.30.1-4ubuntu6.4","1:1.30.1-4ubuntu6.5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.30.1-6ubuntu3","1:1.30.1-7ubuntu1","1:1.30.1-7ubuntu2","1:1.30.1-7ubuntu3","1:1.30.1-7ubuntu3.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.36.1-3ubuntu1","1:1.36.1-6ubuntu1","1:1.36.1-6ubuntu3","1:1.36.1-6ubuntu3.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.37.0-7ubuntu1","1:1.37.0-10.1ubuntu2","1:1.37.0-10.1ubuntu3","1:1.38.0-3ubuntu1","1:1.38.0-3ubuntu3","1:1.38.0-3ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.37.0-4ubuntu1","1:1.37.0-7ubuntu1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.38.0-2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.37.0-160000.7.1"}]}],"bundled":5}],"products":[{"vendor":"busybox","product":"busybox"}],"references":[{"url":"https://busybox.net"},{"url":"https://lists.busybox.net/pipermail/busybox/2026-June/092353.html","tags":["Mailing List","Patch","Vendor Advisory","article"]},{"url":"https://lists.busybox.net/pipermail/busybox/2026-June/092360.html"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-38754","tags":["web","advisory"]},{"url":"https://busybox.com"},{"url":"https://github.com/advisories/GHSA-jj7c-h3wm-vjfw"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-38754","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1787062482.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-38753","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-38754","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3312","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-38752","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-38755","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:41130","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-38753","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-38754","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_41130.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2501183","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-38753","tags":["advisory"]},{"url":"http://busybox.com","tags":["article"]},{"url":"https://lists.busybox.net/pipermail/busybox/2026-June/092352.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2501210","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-38754","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623446-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1217586","tags":["report"]},{"url":"https://bugzilla.suse.com/1271544","tags":["report"]},{"url":"https://bugzilla.suse.com/1271545","tags":["report"]},{"url":"https://bugzilla.suse.com/1271547","tags":["report"]},{"url":"https://bugzilla.suse.com/1271548","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-42366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-38752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-38753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-38754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-38755","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202624154-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263900-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263933-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-38754","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-38754","description":"A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.","status":"published","published":"2026-07-15T00:00:00Z","modified":"2026-07-22T14:42:57.143Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium","assessor":"cna"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-125","CWE-122"],"updated_at":"2026-11-02T14:19:58.560602Z"}],"euvd":[{"id":"EUVD-2026-44850","description":"A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.","status":"published","published":"2026-07-15T00:00:00Z","modified":"2026-07-22T14:42:57Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T18:19:46.391735Z"}],"ghsa":[{"id":"GHSA-jj7c-h3wm-vjfw","title":"A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to...","description":"A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.","status":"published","published":"2026-07-16T00:31:33Z","modified":"2026-07-22T15:32:18Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-122","CWE-125"],"updated_at":"2026-11-02T15:09:39.270941Z"}],"nvd":[{"id":"CVE-2026-38754","description":"A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.","status":"published","published":"2026-07-15T22:16:47.233Z","modified":"2026-07-22T15:16:54.52Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-125","CWE-122"],"updated_at":"2026-11-02T14:12:30.250437Z"}],"osv":[{"id":"BELL-CVE-2026-38754","status":"published","published":"2026-07-18T06:04:43.886251Z","modified":"2026-08-11T07:15:05.201541674Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:28:23.572955Z"},{"id":"DEBIAN-CVE-2026-38754","description":"A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.","status":"published","published":"2026-07-15T22:16:47.233Z","modified":"2026-10-01T03:03:22.456588186Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:45:54.892385Z"},{"id":"OESA-2026-3312","title":"busybox security update","description":"The Swiss Army Knife of Embedded Linux\r\n\r\nSecurity Fix(es):\n\nA stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script.(CVE-2026-38752)\n\nA use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script.(CVE-2026-38753)\n\nA heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.(CVE-2026-38754)\n\nA heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.(CVE-2026-38755)","status":"published","published":"2026-08-07T02:47:03Z","modified":"2026-08-07T03:01:00.781889355Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"RHSA-2026:41130","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","status":"published","published":"2026-08-20T10:16:55Z","modified":"2026-10-06T10:31:28.599281238Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.491441Z"},{"id":"UBUNTU-CVE-2026-38754","description":"A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.","status":"published","published":"2026-07-15T22:16:00Z","modified":"2026-10-17T13:00:03.10853834Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T16:56:16.686388Z"},{"id":"AZL-92484","title":"CVE-2026-38754 affecting package busybox for versions less than 1.36.1-26","description":"A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.","status":"published","published":"2026-07-15T22:16:47Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:25.880689Z"},{"id":"CLSA-2026-1787062482","title":"Fix CVE(s): CVE-2026-38753, CVE-2026-38754","description":"   * SECURITY UPDATE: use-after-free in the awk sub()/gsub()/gensub()\n     replacement string\n     - debian/patches/CVE-2026-38753.patch: awk: copy the replacement string\n       before evaluating the regex argument in awk_sub()\n     - CVE-2026-38753\n   * SECURITY UPDATE: out-of-bounds read in the ash IFS splitting code\n     - debian/patches/CVE-2026-38754.patch: ash: release stale IFS region\n       state when an expansion error is caught in redirectsafe()\n     - CVE-2026-38754","status":"published","published":"2026-08-18T14:14:55Z","modified":"2026-10-26T09:31:52.921914371Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"openSUSE-SU-2026:11605-1","title":"busybox-1.38.0-2.1 on GA media","description":"These are all security issues fixed in the busybox-1.38.0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-08-26T00:00:00Z","modified":"2026-08-27T11:01:50.206243489Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:22040-1","title":"Security update for busybox","description":"This update for busybox fixes the following issues:\n\n- CVE-2023-42366: heap-buffer-overflow in the next_token function (bsc#1217586).\n- CVE-2026-38752: Denial of Service via crafted AWK script (bsc#1271544).\n- CVE-2026-38753: use-after-free in awk_sub() (bsc#1271545).\n- CVE-2026-38754: heap overflow in ifsbreakup() (bsc#1271547).\n- CVE-2026-38755: heap overflow in evalcommand() (bsc#1271548).\n","status":"published","published":"2026-10-06T16:10:21Z","modified":"2026-10-09T17:23:14.713848448Z","updated_at":"2026-11-02T16:58:42.426393Z"},{"id":"SUSE-SU-2026:23446-1","title":"Security update for busybox","description":"This update for busybox fixes the following issues:\n\n- CVE-2023-42366: heap buffer overflow in the `next_token` function of `editors/awk.c` (bsc#1217586).\n- CVE-2026-38752: stack buffer overflow in the `evaluate()` function of `editors/awk.c` (bsc#1271544).\n- CVE-2026-38753: use-after-free in the `awk_sub()` function of `editors/awk.c` (bsc#1271545).\n- CVE-2026-38754: heap buffer overflow in `ifsbreakup()` function of `shell/ash.c` (bsc#1271547).\n- CVE-2026-38755: heap buffer overflow in `evalcommand()` function of `shell/ash.c` (bsc#1271548).\n","status":"published","published":"2026-09-02T09:40:31Z","modified":"2026-09-14T18:23:11.212138244Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:24154-1","title":"Security update for busybox","description":"This update for busybox fixes the following issues:\n\n- CVE-2023-42366: heap-buffer-overflow in the next_token function (bsc#1217586).\n- CVE-2026-38752: Denial of Service via crafted AWK script (bsc#1271544).\n- CVE-2026-38753: use-after-free in awk_sub() (bsc#1271545).\n- CVE-2026-38754: heap overflow in ifsbreakup() (bsc#1271547).\n- CVE-2026-38755: heap overflow in evalcommand() (bsc#1271548).\n","status":"published","published":"2026-10-06T16:06:37Z","modified":"2026-10-16T17:23:11.150328043Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:3900-1","title":"Security update for busybox","description":"This update for busybox fixes the following issues:\n\n- CVE-2023-42366: heap buffer overflow in the `next_token` function of `editors/awk.c` (bsc#1217586).\n- CVE-2026-38752: stack buffer overflow in the `evaluate()` function of `editors/awk.c` (bsc#1271544).\n- CVE-2026-38753: use-after-free in the `awk_sub()` function of `editors/awk.c` (bsc#1271545).\n- CVE-2026-38754: heap buffer overflow in `ifsbreakup()` function of `shell/ash.c` (bsc#1271547).\n- CVE-2026-38755: heap buffer overflow in `evalcommand()` function of `shell/ash.c` (bsc#1271548).\n","status":"published","published":"2026-08-31T15:11:16Z","modified":"2026-09-10T18:23:45.222194255Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"SUSE-SU-2026:3933-1","title":"Security update for busybox","description":"This update for busybox fixes the following issues:\n\n- CVE-2023-42366: heap buffer overflow in the `next_token` function of `editors/awk.c` (bsc#1217586).\n- CVE-2026-38752: stack buffer overflow in the `evaluate()` function of `editors/awk.c` (bsc#1271544).\n- CVE-2026-38753: use-after-free in the `awk_sub()` function of `editors/awk.c` (bsc#1271545).\n- CVE-2026-38754: heap buffer overflow in `ifsbreakup()` function of `shell/ash.c` (bsc#1271547).\n- CVE-2026-38755: heap buffer overflow in `evalcommand()` function of `shell/ash.c` (bsc#1271548).\n","status":"published","published":"2026-09-03T07:21:37Z","modified":"2026-09-10T18:23:19.869986709Z","updated_at":"2026-11-02T15:54:05.392906Z"}]}}