Search for packages
| purl | pkg:deb/debian/busybox@1:1.37.0-10.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-8844-hdkd-yyc7 | busybox: BusyBox: Arbitrary file modification and privilege escalation via unvalidated tar archive entries |
CVE-2026-26158
|
| VCID-fugr-ve7z-efdb | busybox: BusyBox: Arbitrary file overwrite and potential code execution via incomplete path sanitization |
CVE-2026-26157
|
| VCID-g5t1-3tab-uuf9 | In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim. |
CVE-2024-58251
|
| VCID-jjqh-pw7r-buau | In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences. |
CVE-2025-46394
|
| VCID-n1u3-njfx-vfcp | busybox: A heap-buffer-overflow |
CVE-2023-42366
|
| VCID-t62w-rrsb-vqgy | busybox: BusyBox wget: HTTP request-target allows header injection |
CVE-2025-60876
|
| VCID-ytff-pgz4-tub2 | busybox: CPIO command of Busybox allows attackers to execute a directory traversal |
CVE-2023-39810
|