Search for packages
| purl | pkg:deb/debian/busybox@1:1.35.0-4 |
| Next non-vulnerable version | 1:1.35.0-4+deb12u1 |
| Latest non-vulnerable version | 1:1.37.0-10.1 |
| Risk | 4.4 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-8844-hdkd-yyc7
Aliases: CVE-2026-26158 |
busybox: BusyBox: Arbitrary file modification and privilege escalation via unvalidated tar archive entries |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-9s28-b1gj-uqaj
Aliases: CVE-2022-48174 |
busybox: stack overflow vulnerability in ash.c leads to arbitrary code execution |
Affected by 0 other vulnerabilities. |
|
VCID-fugr-ve7z-efdb
Aliases: CVE-2026-26157 |
busybox: BusyBox: Arbitrary file overwrite and potential code execution via incomplete path sanitization |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-g5t1-3tab-uuf9
Aliases: CVE-2024-58251 |
In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-jjqh-pw7r-buau
Aliases: CVE-2025-46394 |
In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-n1u3-njfx-vfcp
Aliases: CVE-2023-42366 |
busybox: A heap-buffer-overflow |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-syfd-zx16-n3gy
Aliases: CVE-2022-30065 |
busybox: A use-after-free in Busybox's awk applet leads to denial of service |
Affected by 0 other vulnerabilities. |
|
VCID-t62w-rrsb-vqgy
Aliases: CVE-2025-60876 |
busybox: BusyBox wget: HTTP request-target allows header injection |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-v6td-yjyg-rub4
Aliases: CVE-2023-42365 |
busybox: use-after-free |
Affected by 0 other vulnerabilities. |
|
VCID-xjbx-z3d5-5bad
Aliases: CVE-2023-42363 |
busybox: use-after-free in awk |
Affected by 0 other vulnerabilities. |
|
VCID-y9hd-5med-67c4
Aliases: CVE-2023-42364 |
busybox: use-after-free |
Affected by 0 other vulnerabilities. |
|
VCID-ytff-pgz4-tub2
Aliases: CVE-2023-39810 |
busybox: CPIO command of Busybox allows attackers to execute a directory traversal |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-4muk-rhx5-yqeu | Multiple vulnerabilities have been discovered in BusyBox, the worst of which could lead to arbitrary code execution. |
CVE-2021-42386
|
| VCID-4qpt-mxfy-6bh6 | Multiple vulnerabilities have been discovered in BusyBox, the worst of which could lead to arbitrary code execution. |
CVE-2021-42385
|
| VCID-8r73-bpac-dubc | Multiple vulnerabilities have been discovered in BusyBox, the worst of which could lead to arbitrary code execution. |
CVE-2021-42377
|
| VCID-92nk-cwc9-rkg4 | Multiple vulnerabilities have been discovered in BusyBox, the worst of which could lead to arbitrary code execution. |
CVE-2021-42375
|
| VCID-9fex-zr2n-w3cb | Multiple vulnerabilities have been discovered in BusyBox, the worst of which could lead to arbitrary code execution. |
CVE-2021-42384
|
| VCID-9s28-b1gj-uqaj | busybox: stack overflow vulnerability in ash.c leads to arbitrary code execution |
CVE-2022-48174
|
| VCID-dse8-esmh-3ygm | Multiple vulnerabilities have been discovered in BusyBox, the worst of which could lead to arbitrary code execution. |
CVE-2021-42380
|
| VCID-gdfa-8gar-47gd | Multiple vulnerabilities have been discovered in BusyBox, the worst of which could lead to arbitrary code execution. |
CVE-2021-42379
|
| VCID-jjxj-yf1x-4qg5 | Multiple vulnerabilities have been discovered in BusyBox, the worst of which could lead to arbitrary code execution. |
CVE-2021-42378
|
| VCID-mdmz-hjvu-hke3 | Multiple vulnerabilities have been discovered in BusyBox, the worst of which could lead to arbitrary code execution. |
CVE-2021-42382
|
| VCID-r12h-q1dj-a7b8 | Multiple vulnerabilities have been discovered in BusyBox, the worst of which could lead to arbitrary code execution. |
CVE-2021-42381
|
| VCID-rp81-5jrg-jkht | Multiple vulnerabilities have been discovered in BusyBox, the worst of which could lead to arbitrary code execution. |
CVE-2021-42373
|
| VCID-svyb-nqje-dbcs | Multiple vulnerabilities have been discovered in BusyBox, the worst of which could lead to arbitrary code execution. |
CVE-2021-42383
|
| VCID-tkat-gfks-kqg9 | Multiple vulnerabilities have been discovered in BusyBox, the worst of which could lead to arbitrary code execution. |
CVE-2021-42374
|
| VCID-v6td-yjyg-rub4 | busybox: use-after-free |
CVE-2023-42365
|
| VCID-vjyq-6k64-7fat | Multiple vulnerabilities have been discovered in BusyBox, the worst of which could lead to arbitrary code execution. |
CVE-2021-42376
|
| VCID-vpmv-afzs-tffj | A vulnerability in BusyBox might allow remote attackers to cause a Denial of Service condition. |
CVE-2021-28831
|
| VCID-y9hd-5med-67c4 | busybox: use-after-free |
CVE-2023-42364
|