busybox vulnerabilities (Red Hat)
21 vulnerabilities.
-
busyboxRed Hat Busybox: busybox: dpkg stale field_start pointer causes out-of-bounds read and status file corruption 3.3 Low -
busyboxRed Hat Busybox: busybox: tar extraction-root escape via deferred symlink/hardlink creation bypasses cve-2026-26158 fix 6.3 Medium -
busyboxRed Hat Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update 3.3 Low -
busyboxRed Hat Busybox: busybox: passwd/group parser writes heap pointers out of bounds due to stale tokenize() endpoint 6.7 Medium -
busyboxRed Hat Busybox: busybox: httpd misidentifies yescrypt password hashes as plaintext, inverting authentication 6.5 Medium -
busyboxRed Hat Busybox: busybox: dpkg read_package_field() steps past nul terminator, causing out-of-bounds read on malformed .deb packages 6.1 Medium -
busyboxRed Hat Busybox: busybox: httpd silently fails open when ip deny rules contain invalid cidr prefix lengths 5.3 Medium -
busyboxRed Hat Busybox: busybox: romfs volume id parsing performs unbounded memcpy into fixed-size label buffer, causing heap overflow 7.3 High -
busyboxRed Hat A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers... 2.9 Low -
busyboxRed Hat A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to... 5.1 Medium -
busyboxRed Hat A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to... 4.9 Medium -
busyboxRed Hat A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows... 2.9 Low -
busyboxRed Hat BusyBox DHCPv6 Client Heap Buffer Overflow via DNS_SERVERS 7.2 High -
busyboxRed Hat Busybox: busybox: arbitrary file modification and privilege escalation via unvalidated tar archive entries 7.0 High -
busyboxRed Hat Busybox: busybox: arbitrary file overwrite and potential code execution via incomplete path sanitization 7.0 High -
busyboxRed Hat BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP... 6.5 Medium -
busyboxRed Hat There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment... 9.8 Critical -
busyboxRed Hat util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when... 7.2 High -
busyboxRed Hat The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary... 6.8 Medium -
busyboxRed Hat The decompress function in compress42.c in (1) ncompress 4.2.4 and (2) liblzw allows remote... 7.5 High -
busyboxRed Hat BusyBox 1.1.1 does not use a salt when generating passwords, which makes it easier for local... 5.5 Medium