Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/busybox@1:1.30.1-6
purl pkg:deb/debian/busybox@1:1.30.1-6
Next non-vulnerable version 1:1.35.0-4+deb12u1
Latest non-vulnerable version 1:1.37.0-10.1
Risk 4.4
Vulnerabilities affecting this package (27)
Vulnerability Summary Fixed by
VCID-4muk-rhx5-yqeu
Aliases:
CVE-2021-42386
Multiple vulnerabilities have been discovered in BusyBox, the worst of which could lead to arbitrary code execution.
1:1.35.0-4
Affected by 12 other vulnerabilities.
VCID-4qpt-mxfy-6bh6
Aliases:
CVE-2021-42385
Multiple vulnerabilities have been discovered in BusyBox, the worst of which could lead to arbitrary code execution.
1:1.35.0-4
Affected by 12 other vulnerabilities.
VCID-8844-hdkd-yyc7
Aliases:
CVE-2026-26158
busybox: BusyBox: Arbitrary file modification and privilege escalation via unvalidated tar archive entries
1:1.35.0-4+deb12u1
Affected by 0 other vulnerabilities.
1:1.37.0-10.1
Affected by 0 other vulnerabilities.
VCID-8r73-bpac-dubc
Aliases:
CVE-2021-42377
Multiple vulnerabilities have been discovered in BusyBox, the worst of which could lead to arbitrary code execution.
1:1.35.0-4
Affected by 12 other vulnerabilities.
VCID-92nk-cwc9-rkg4
Aliases:
CVE-2021-42375
Multiple vulnerabilities have been discovered in BusyBox, the worst of which could lead to arbitrary code execution.
1:1.35.0-4
Affected by 12 other vulnerabilities.
VCID-9fex-zr2n-w3cb
Aliases:
CVE-2021-42384
Multiple vulnerabilities have been discovered in BusyBox, the worst of which could lead to arbitrary code execution.
1:1.35.0-4
Affected by 12 other vulnerabilities.
VCID-9s28-b1gj-uqaj
Aliases:
CVE-2022-48174
busybox: stack overflow vulnerability in ash.c leads to arbitrary code execution
1:1.35.0-4
Affected by 12 other vulnerabilities.
1:1.35.0-4+deb12u1
Affected by 0 other vulnerabilities.
VCID-dse8-esmh-3ygm
Aliases:
CVE-2021-42380
Multiple vulnerabilities have been discovered in BusyBox, the worst of which could lead to arbitrary code execution.
1:1.35.0-4
Affected by 12 other vulnerabilities.
VCID-fugr-ve7z-efdb
Aliases:
CVE-2026-26157
busybox: BusyBox: Arbitrary file overwrite and potential code execution via incomplete path sanitization
1:1.35.0-4+deb12u1
Affected by 0 other vulnerabilities.
1:1.37.0-10.1
Affected by 0 other vulnerabilities.
VCID-g5t1-3tab-uuf9
Aliases:
CVE-2024-58251
In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.
1:1.35.0-4+deb12u1
Affected by 0 other vulnerabilities.
1:1.37.0-10.1
Affected by 0 other vulnerabilities.
VCID-gdfa-8gar-47gd
Aliases:
CVE-2021-42379
Multiple vulnerabilities have been discovered in BusyBox, the worst of which could lead to arbitrary code execution.
1:1.35.0-4
Affected by 12 other vulnerabilities.
VCID-jjqh-pw7r-buau
Aliases:
CVE-2025-46394
In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.
1:1.35.0-4+deb12u1
Affected by 0 other vulnerabilities.
1:1.37.0-10.1
Affected by 0 other vulnerabilities.
VCID-jjxj-yf1x-4qg5
Aliases:
CVE-2021-42378
Multiple vulnerabilities have been discovered in BusyBox, the worst of which could lead to arbitrary code execution.
1:1.35.0-4
Affected by 12 other vulnerabilities.
VCID-mdmz-hjvu-hke3
Aliases:
CVE-2021-42382
Multiple vulnerabilities have been discovered in BusyBox, the worst of which could lead to arbitrary code execution.
1:1.35.0-4
Affected by 12 other vulnerabilities.
VCID-n1u3-njfx-vfcp
Aliases:
CVE-2023-42366
busybox: A heap-buffer-overflow
1:1.35.0-4+deb12u1
Affected by 0 other vulnerabilities.
1:1.37.0-10.1
Affected by 0 other vulnerabilities.
VCID-r12h-q1dj-a7b8
Aliases:
CVE-2021-42381
Multiple vulnerabilities have been discovered in BusyBox, the worst of which could lead to arbitrary code execution.
1:1.35.0-4
Affected by 12 other vulnerabilities.
VCID-rp81-5jrg-jkht
Aliases:
CVE-2021-42373
Multiple vulnerabilities have been discovered in BusyBox, the worst of which could lead to arbitrary code execution.
1:1.35.0-4
Affected by 12 other vulnerabilities.
VCID-svyb-nqje-dbcs
Aliases:
CVE-2021-42383
Multiple vulnerabilities have been discovered in BusyBox, the worst of which could lead to arbitrary code execution.
1:1.35.0-4
Affected by 12 other vulnerabilities.
VCID-syfd-zx16-n3gy
Aliases:
CVE-2022-30065
busybox: A use-after-free in Busybox's awk applet leads to denial of service
1:1.35.0-4+deb12u1
Affected by 0 other vulnerabilities.
VCID-t62w-rrsb-vqgy
Aliases:
CVE-2025-60876
busybox: BusyBox wget: HTTP request-target allows header injection
1:1.35.0-4+deb12u1
Affected by 0 other vulnerabilities.
1:1.37.0-10.1
Affected by 0 other vulnerabilities.
VCID-tkat-gfks-kqg9
Aliases:
CVE-2021-42374
Multiple vulnerabilities have been discovered in BusyBox, the worst of which could lead to arbitrary code execution.
1:1.35.0-4
Affected by 12 other vulnerabilities.
VCID-v6td-yjyg-rub4
Aliases:
CVE-2023-42365
busybox: use-after-free
1:1.35.0-4
Affected by 12 other vulnerabilities.
1:1.35.0-4+deb12u1
Affected by 0 other vulnerabilities.
VCID-vjyq-6k64-7fat
Aliases:
CVE-2021-42376
Multiple vulnerabilities have been discovered in BusyBox, the worst of which could lead to arbitrary code execution.
1:1.35.0-4
Affected by 12 other vulnerabilities.
VCID-vpmv-afzs-tffj
Aliases:
CVE-2021-28831
A vulnerability in BusyBox might allow remote attackers to cause a Denial of Service condition.
1:1.35.0-4
Affected by 12 other vulnerabilities.
VCID-xjbx-z3d5-5bad
Aliases:
CVE-2023-42363
busybox: use-after-free in awk
1:1.35.0-4+deb12u1
Affected by 0 other vulnerabilities.
VCID-y9hd-5med-67c4
Aliases:
CVE-2023-42364
busybox: use-after-free
1:1.35.0-4
Affected by 12 other vulnerabilities.
1:1.35.0-4+deb12u1
Affected by 0 other vulnerabilities.
VCID-ytff-pgz4-tub2
Aliases:
CVE-2023-39810
busybox: CPIO command of Busybox allows attackers to execute a directory traversal
1:1.35.0-4+deb12u1
Affected by 0 other vulnerabilities.
1:1.37.0-10.1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T13:12:37.008296+00:00 Debian Importer Affected by VCID-8844-hdkd-yyc7 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T12:36:30.155682+00:00 Debian Importer Affected by VCID-92nk-cwc9-rkg4 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T12:26:32.147697+00:00 Debian Importer Affected by VCID-g5t1-3tab-uuf9 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T12:25:38.690007+00:00 Debian Importer Affected by VCID-xjbx-z3d5-5bad https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T11:46:04.628736+00:00 Debian Importer Affected by VCID-n1u3-njfx-vfcp https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T11:44:26.362818+00:00 Debian Importer Affected by VCID-jjqh-pw7r-buau https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T11:29:19.166252+00:00 Debian Importer Affected by VCID-rp81-5jrg-jkht https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T11:02:36.581466+00:00 Debian Importer Affected by VCID-8r73-bpac-dubc https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T11:01:32.341141+00:00 Debian Importer Affected by VCID-svyb-nqje-dbcs https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:50:36.533665+00:00 Debian Importer Affected by VCID-fugr-ve7z-efdb https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:42:14.438025+00:00 Debian Importer Affected by VCID-t62w-rrsb-vqgy https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:26:32.469248+00:00 Debian Importer Affected by VCID-syfd-zx16-n3gy https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T08:44:12.405226+00:00 Debian Importer Affected by VCID-vjyq-6k64-7fat https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T08:38:39.684838+00:00 Debian Importer Affected by VCID-ytff-pgz4-tub2 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-15T23:27:31.277230+00:00 Debian Oval Importer Affected by VCID-jjxj-yf1x-4qg5 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T23:15:38.219258+00:00 Debian Oval Importer Affected by VCID-y9hd-5med-67c4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T22:55:46.503423+00:00 Debian Oval Importer Affected by VCID-9s28-b1gj-uqaj https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T22:23:42.116840+00:00 Debian Oval Importer Affected by VCID-9fex-zr2n-w3cb https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T22:00:26.788230+00:00 Debian Oval Importer Affected by VCID-4qpt-mxfy-6bh6 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T21:29:24.743285+00:00 Debian Oval Importer Affected by VCID-tkat-gfks-kqg9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T19:59:13.260410+00:00 Debian Oval Importer Affected by VCID-4muk-rhx5-yqeu https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T19:29:44.092300+00:00 Debian Oval Importer Affected by VCID-v6td-yjyg-rub4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T19:17:29.803137+00:00 Debian Oval Importer Affected by VCID-gdfa-8gar-47gd https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T19:11:43.689690+00:00 Debian Oval Importer Affected by VCID-mdmz-hjvu-hke3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T18:29:11.063339+00:00 Debian Oval Importer Affected by VCID-r12h-q1dj-a7b8 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T17:40:09.747238+00:00 Debian Oval Importer Affected by VCID-dse8-esmh-3ygm https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T15:45:13.907298+00:00 Debian Oval Importer Affected by VCID-vpmv-afzs-tffj https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-13T09:05:32.913355+00:00 Debian Importer Affected by VCID-8844-hdkd-yyc7 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T08:38:13.832624+00:00 Debian Importer Affected by VCID-92nk-cwc9-rkg4 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T08:30:59.015348+00:00 Debian Importer Affected by VCID-g5t1-3tab-uuf9 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T08:30:23.358041+00:00 Debian Importer Affected by VCID-xjbx-z3d5-5bad https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T08:01:28.265235+00:00 Debian Importer Affected by VCID-n1u3-njfx-vfcp https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T08:00:15.149306+00:00 Debian Importer Affected by VCID-jjqh-pw7r-buau https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:49:43.521676+00:00 Debian Importer Affected by VCID-rp81-5jrg-jkht https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:29:51.564353+00:00 Debian Importer Affected by VCID-8r73-bpac-dubc https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:29:03.838827+00:00 Debian Importer Affected by VCID-svyb-nqje-dbcs https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:20:29.812331+00:00 Debian Importer Affected by VCID-fugr-ve7z-efdb https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:14:24.657130+00:00 Debian Importer Affected by VCID-t62w-rrsb-vqgy https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:02:38.619550+00:00 Debian Importer Affected by VCID-syfd-zx16-n3gy https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T23:02:53.374460+00:00 Debian Oval Importer Affected by VCID-jjxj-yf1x-4qg5 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T22:51:21.201432+00:00 Debian Oval Importer Affected by VCID-y9hd-5med-67c4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T22:32:11.966669+00:00 Debian Oval Importer Affected by VCID-9s28-b1gj-uqaj https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T22:00:55.360518+00:00 Debian Oval Importer Affected by VCID-9fex-zr2n-w3cb https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T21:38:40.111251+00:00 Debian Oval Importer Affected by VCID-4qpt-mxfy-6bh6 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T21:08:35.328454+00:00 Debian Oval Importer Affected by VCID-tkat-gfks-kqg9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T19:41:10.516902+00:00 Debian Oval Importer Affected by VCID-4muk-rhx5-yqeu https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T19:12:38.648368+00:00 Debian Oval Importer Affected by VCID-v6td-yjyg-rub4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T19:00:53.849417+00:00 Debian Oval Importer Affected by VCID-gdfa-8gar-47gd https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T18:55:20.761393+00:00 Debian Oval Importer Affected by VCID-mdmz-hjvu-hke3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T18:14:08.781302+00:00 Debian Oval Importer Affected by VCID-r12h-q1dj-a7b8 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T17:52:10.538064+00:00 Debian Importer Affected by VCID-vjyq-6k64-7fat https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T17:48:44.800846+00:00 Debian Importer Affected by VCID-ytff-pgz4-tub2 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T17:26:19.157377+00:00 Debian Oval Importer Affected by VCID-dse8-esmh-3ygm https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T15:32:58.426009+00:00 Debian Oval Importer Affected by VCID-vpmv-afzs-tffj https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-08T22:36:47.306408+00:00 Debian Oval Importer Affected by VCID-jjxj-yf1x-4qg5 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T22:25:54.903184+00:00 Debian Oval Importer Affected by VCID-y9hd-5med-67c4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T22:07:44.643482+00:00 Debian Oval Importer Affected by VCID-9s28-b1gj-uqaj https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T21:38:00.107795+00:00 Debian Oval Importer Affected by VCID-9fex-zr2n-w3cb https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T21:16:42.001649+00:00 Debian Oval Importer Affected by VCID-4qpt-mxfy-6bh6 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T20:47:38.968672+00:00 Debian Oval Importer Affected by VCID-tkat-gfks-kqg9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T19:24:08.517684+00:00 Debian Oval Importer Affected by VCID-4muk-rhx5-yqeu https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T18:56:40.405703+00:00 Debian Oval Importer Affected by VCID-v6td-yjyg-rub4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T18:45:23.619078+00:00 Debian Oval Importer Affected by VCID-gdfa-8gar-47gd https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T18:40:00.964511+00:00 Debian Oval Importer Affected by VCID-mdmz-hjvu-hke3 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T18:00:24.818196+00:00 Debian Oval Importer Affected by VCID-r12h-q1dj-a7b8 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T17:14:25.028545+00:00 Debian Oval Importer Affected by VCID-dse8-esmh-3ygm https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T15:27:07.791292+00:00 Debian Oval Importer Affected by VCID-vpmv-afzs-tffj https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-02T17:17:48.045636+00:00 Debian Importer Affected by VCID-8844-hdkd-yyc7 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-02T17:15:32.755066+00:00 Debian Importer Affected by VCID-92nk-cwc9-rkg4 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-02T17:15:03.428636+00:00 Debian Importer Affected by VCID-g5t1-3tab-uuf9 https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-02T17:14:56.963142+00:00 Debian Importer Affected by VCID-xjbx-z3d5-5bad https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-02T17:12:40.921276+00:00 Debian Importer Affected by VCID-n1u3-njfx-vfcp https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-02T17:12:37.913084+00:00 Debian Importer Affected by VCID-jjqh-pw7r-buau https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-02T17:11:49.119107+00:00 Debian Importer Affected by VCID-rp81-5jrg-jkht https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-02T17:10:11.445971+00:00 Debian Importer Affected by VCID-8r73-bpac-dubc https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-02T17:10:09.776104+00:00 Debian Importer Affected by VCID-svyb-nqje-dbcs https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-02T17:09:38.156430+00:00 Debian Importer Affected by VCID-fugr-ve7z-efdb https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-02T17:09:08.886754+00:00 Debian Importer Affected by VCID-t62w-rrsb-vqgy https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-02T17:08:10.560221+00:00 Debian Importer Affected by VCID-syfd-zx16-n3gy https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-02T17:02:33.924166+00:00 Debian Importer Affected by VCID-vjyq-6k64-7fat https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-02T17:02:14.057435+00:00 Debian Importer Affected by VCID-ytff-pgz4-tub2 https://security-tracker.debian.org/tracker/data/json 38.1.0