busybox vulnerabilities (Alpaquita)
22 vulnerabilities.
busyboxAlpaquitaBusybox: busybox: http request smuggling via pipelined requests in httpd reverse proxy7.2 HighbusyboxAlpaquitaBusybox: busybox: httpd user existence oracle in non-default shadow-disabled builds3.7 LowbusyboxAlpaquitaBusybox: busybox: non-root mount option filter bypass allows clearing fstab security restrictions5.5 MediumbusyboxAlpaquitaBusybox: busybox: udhcpc integer underflow in dhcp packet length calculation causes denial of service6.5 MediumbusyboxAlpaquitaBusybox: busybox: tar extraction-root escape via deferred symlink/hardlink creation bypasses cve-2026-26158 fix6.3 MediumbusyboxAlpaquitaBusybox: busybox: httpd misidentifies yescrypt password hashes as plaintext, inverting authentication6.5 MediumbusyboxAlpaquitaBusybox: busybox: httpd silently fails open when ip deny rules contain invalid cidr prefix lengths5.3 MediumbusyboxAlpaquitaA heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers...2.9 LowbusyboxAlpaquitaA heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to...5.1 MediumbusyboxAlpaquitaA stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows...2.9 LowbusyboxAlpaquitaBusyBox DHCPv6 Client Heap Buffer Overflow via DNS_SERVERS7.2 HighbusyboxAlpaquitaBusybox: busybox: arbitrary file modification and privilege escalation via unvalidated tar archive entries7.0 HighbusyboxAlpaquitaBusybox: busybox: arbitrary file overwrite and potential code execution via incomplete path sanitization7.0 HighbusyboxAlpaquitaBusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP...6.5 MediumbusyboxAlpaquitaIn tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through...3.2 LowbusyboxAlpaquitaIn netstat in BusyBox through 1.37.0, local users can launch of network application with an argv...2.5 LowbusyboxAlpaquitaA heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.5.5 MediumbusyboxAlpaquitaA use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in...5.5 MediumbusyboxAlpaquitaA use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service...5.5 MediumbusyboxAlpaquitaA use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in...5.5 MediumbusyboxAlpaquitaAn issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal.7.8 HighbusyboxAlpaquitaThere is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment...9.8 Critical