Search for packages
| purl | pkg:deb/debian/busybox@1:1.35.0-4%2Bdeb12u1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-8844-hdkd-yyc7 | busybox: BusyBox: Arbitrary file modification and privilege escalation via unvalidated tar archive entries |
CVE-2026-26158
|
| VCID-9s28-b1gj-uqaj | busybox: stack overflow vulnerability in ash.c leads to arbitrary code execution |
CVE-2022-48174
|
| VCID-fugr-ve7z-efdb | busybox: BusyBox: Arbitrary file overwrite and potential code execution via incomplete path sanitization |
CVE-2026-26157
|
| VCID-g5t1-3tab-uuf9 | In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim. |
CVE-2024-58251
|
| VCID-jjqh-pw7r-buau | In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences. |
CVE-2025-46394
|
| VCID-n1u3-njfx-vfcp | busybox: A heap-buffer-overflow |
CVE-2023-42366
|
| VCID-syfd-zx16-n3gy | busybox: A use-after-free in Busybox's awk applet leads to denial of service |
CVE-2022-30065
|
| VCID-t62w-rrsb-vqgy | busybox: BusyBox wget: HTTP request-target allows header injection |
CVE-2025-60876
|
| VCID-v6td-yjyg-rub4 | busybox: use-after-free |
CVE-2023-42365
|
| VCID-xjbx-z3d5-5bad | busybox: use-after-free in awk |
CVE-2023-42363
|
| VCID-y9hd-5med-67c4 | busybox: use-after-free |
CVE-2023-42364
|
| VCID-ytff-pgz4-tub2 | busybox: CPIO command of Busybox allows attackers to execute a directory traversal |
CVE-2023-39810
|