busybox vulnerabilities (SUSE)
51 vulnerabilities.
-
busyboxSUSE Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update 3.3 Low -
busyboxSUSE Busybox: busybox: passwd/group parser writes heap pointers out of bounds due to stale tokenize() endpoint 6.7 Medium -
busyboxSUSE Busybox: busybox: httpd misidentifies yescrypt password hashes as plaintext, inverting authentication 6.5 Medium -
busyboxSUSE Busybox: busybox: dpkg read_package_field() steps past nul terminator, causing out-of-bounds read on malformed .deb packages 6.1 Medium -
busyboxSUSE Busybox: busybox: httpd silently fails open when ip deny rules contain invalid cidr prefix lengths 5.3 Medium -
busyboxSUSE Busybox: busybox: romfs volume id parsing performs unbounded memcpy into fixed-size label buffer, causing heap overflow 7.3 High -
busyboxSUSE Busybox: busybox: tls montgomery reduction allocates bytes instead of digits, causing a pre-auth heap buffer overflow 7.5 High -
busyboxSUSE A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers... 2.9 Low -
busyboxSUSE A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to... 5.1 Medium -
busyboxSUSE A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to... 4.9 Medium -
busyboxSUSE A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows... 2.9 Low -
busyboxSUSE BusyBox DHCPv6 Client Heap Buffer Overflow via DNS_SERVERS 7.2 High -
busyboxSUSE An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in... 5.3 Medium -
busyboxSUSE Busybox: busybox: arbitrary file modification and privilege escalation via unvalidated tar archive entries 7.0 High -
busyboxSUSE Busybox: busybox: arbitrary file overwrite and potential code execution via incomplete path sanitization 7.0 High -
busyboxSUSE BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP... 6.5 Medium -
busyboxSUSE In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through... 3.2 Low -
busyboxSUSE A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159. 5.5 Medium -
busyboxSUSE A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in... 5.5 Medium -
busyboxSUSE A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service... 5.5 Medium -
busyboxSUSE A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in... 5.5 Medium -
busyboxSUSE There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment... 9.8 Critical -
busyboxSUSE A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code... 7.8 High -
busyboxSUSE A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution... 7.2 High -
busyboxSUSE A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution... 7.2 High -
busyboxSUSE A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution... 7.2 High -
busyboxSUSE A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution... 7.2 High -
busyboxSUSE A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution... 7.2 High -
busyboxSUSE A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution... 7.2 High -
busyboxSUSE A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution... 7.2 High -
busyboxSUSE A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution... 7.2 High -
busyboxSUSE A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution... 7.2 High -
busyboxSUSE An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and... 9.8 Critical -
busyboxSUSE A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a... 5.5 Medium -
busyboxSUSE An incorrect handling of a special element in Busybox's ash applet leads to denial of service... 5.5 Medium -
busyboxSUSE An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of... 5.3 Medium -
busyboxSUSE A NULL pointer dereference in Busybox's man applet leads to denial of service when a section name... 5.5 Medium -
busyboxSUSE decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result... 7.5 High -
busyboxSUSE An issue was discovered in BusyBox through 1.30.0. An out of bounds read in udhcp components ... 7.5 High -
busyboxSUSE An issue was discovered in BusyBox before 1.30.0. An out of bounds read in udhcp components ... 7.5 High -
busyboxSUSE Busybox contains a Missing SSL certificate validation vulnerability in The "busybox wget" applet... 8.1 High -
busyboxSUSE BusyBox project BusyBox wget version prior to commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e... 9.8 Critical -
busyboxSUSE In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete... 8.8 High -
busyboxSUSE archival/libarchive/decompress_unlzma.c in BusyBox 1.27.2 has an Integer Underflow that leads to... 5.5 Medium -
busyboxSUSE The get_next_block function in archival/libarchive/decompress_bunzip2.c in BusyBox 1.27.2 has an... 5.5 Medium -
busyboxSUSE Directory traversal vulnerability in the BusyBox implementation of tar before 1.22.0 v5 allows... 7.5 High -
busyboxSUSE Heap-based buffer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote... 9.8 Critical -
busyboxSUSE Integer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to... 7.5 High -
busyboxSUSE The recv_and_process_client_pkt function in networking/ntpd.c in busybox allows remote attackers... 7.5 High -
busyboxSUSE huft_build in archival/libarchive/decompress_gunzip.c in BusyBox before 1.27.2 misuses a pointer,... 5.5 Medium - Show olderLoading…