busybox kayıtları

busybox üreticisine ait 46 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 4
Düzeltme kaydı olan: %97,8
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

46 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
49Planlayın	CVE-2018-1000517İstismar yok	BusyBox project BusyBox wget version prior to commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e contains a Buffer Overflow vulnerability in Bubusybox · busybox · CWE-120 Kimlik doğrulamasız Bellek hatası	Kritik9,8	—	%32,9	26 Haz 2018
47Planlayın	CVE-2016-2148İstismar yok	Heap-based buffer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to have unspecified impact via vectobusybox · busybox · CWE-119 Kimlik doğrulamasız Bellek hatası	Kritik9,8	—	%27,1	9 Şub 2017
40Planlayın	CVE-2021-42377İstismar yok	An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a craftebusybox · busybox · CWE-590 pre-auth RCE	Kritik9,8	—	%3,6	15 Kas 2021
40Planlayın	CVE-2022-48174İstismar yok	There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35.busybox · busybox · CWE-787 pre-auth RCE Bellek hatası	Kritik9,8	—	%3,2	22 Ağu 2023
37İzleyin	CVE-2017-16544İstismar yok	In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of fibusybox · busybox · CWE-94 RCE	Yüksek8,8	—	%6,1	20 Kas 2017
36İzleyin	CVE-2022-28391İstismar yok	BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatbusybox · busybox · CWE-88 pre-auth RCE	Yüksek8,8	—	%3,5	3 Nis 2022
33İzleyin	CVE-2016-6301İstismar yok	The recv_and_process_client_pkt function in networking/ntpd.c in busybox allows remote attackers to cause a denial of service (CPU and bandwbusybox · busybox · CWE-399 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%9,0	9 Ara 2016
33İzleyin	CVE-2018-1000500İstismar yok	Busybox contains a Missing SSL certificate validation vulnerability in The "busybox wget" applet that can result in arbitrary code executionbusybox · busybox · CWE-295 pre-auth RCE Zayıf kripto	Yüksek8,1	—	%2,5	26 Haz 2018
32İzleyin	CVE-2016-2147İstismar yok	Integer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to cause a denial of service (crash) via a malbusybox · busybox · CWE-190 Kimlik doğrulamasız Bellek hatası Hizmet dışı bırakma	Yüksek7,5	—	%7,8	9 Şub 2017
32İzleyin	CVE-2018-20679İstismar yok	An issue was discovered in BusyBox before 1.30.0.busybox · busybox · CWE-125 Kimlik doğrulamasız Bellek hatası	Yüksek7,5	—	%7,7	9 Oca 2019
32İzleyin	CVE-2011-5325İstismar yok	Directory traversal vulnerability in the BusyBox implementation of tar before 1.22.0 v5 allows remote attackers to point to files outside thbusybox · busybox · CWE-22 Kimlik doğrulamasız Yol geçişi	Yüksek7,5	—	%7,0	7 Ağu 2017
32İzleyin	CVE-2017-3209İstismar yok	The DBPOWER U818A WIFI quadcopter drone provides FTP access over its own local access point, and allows full file permissions to the anonymous userdbpower · u818a firmware · CWE-276 Kimlik doğrulamasız	Yüksek8,1	—	%1,2	24 Tem 2018
31İzleyin	CVE-2019-5747İstismar yok	An issue was discovered in BusyBox through 1.30.0.busybox · busybox · CWE-125 Kimlik doğrulamasız Bellek hatası	Yüksek7,5	—	%4,7	9 Oca 2019
31İzleyin	CVE-2021-28831İstismar yok	decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or sebusybox · busybox · CWE-755 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	—	%2,7	19 Mar 2021
31İzleyin	CVE-2022-30065İstismar yok	A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk patternbusybox · busybox · CWE-416 Bellek hatası	Yüksek7,8	—	%1,3	18 May 2022
31İzleyin	CVE-2023-39810İstismar yok	An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal.busybox · busybox · CWE-22 Yol geçişi	Yüksek7,8	—	%0,8	28 Ağu 2023
29İzleyin	CVE-2021-42380İstismar yok	A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in thebusybox · busybox · CWE-416 Bellek hatası	Yüksek7,2	—	%3,1	15 Kas 2021
29İzleyin	CVE-2021-42379İstismar yok	A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in thebusybox · busybox · CWE-416 Bellek hatası	Yüksek7,2	—	%2,8	15 Kas 2021
29İzleyin	CVE-2021-42381İstismar yok	A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in thebusybox · busybox · CWE-416 Bellek hatası	Yüksek7,2	—	%2,8	15 Kas 2021
29İzleyin	CVE-2021-42385İstismar yok	A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in thebusybox · busybox · CWE-416 Bellek hatası	Yüksek7,2	—	%2,8	15 Kas 2021
29İzleyin	CVE-2021-42382İstismar yok	A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in thebusybox · busybox · CWE-416 Bellek hatası	Yüksek7,2	—	%2,8	15 Kas 2021
29İzleyin	CVE-2021-42384İstismar yok	A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in thebusybox · busybox · CWE-416 Bellek hatası	Yüksek7,2	—	%2,7	15 Kas 2021
29İzleyin	CVE-2021-42386İstismar yok	A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in thebusybox · busybox · CWE-416 Bellek hatası	Yüksek7,2	—	%2,7	15 Kas 2021
29İzleyin	CVE-2021-42378İstismar yok	A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in thebusybox · busybox · CWE-416 Bellek hatası	Yüksek7,2	—	%2,7	15 Kas 2021
29İzleyin	CVE-2021-42383İstismar yok	A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in thebusybox · busybox · CWE-416 Bellek hatası	Yüksek7,2	—	%2,2	15 Kas 2021

CVE-2018-1000517
49Planlayın
BusyBox project BusyBox wget version prior to commit 8e2174e9bd836e53c8b9c6e00d1bc6e2a718686e contains a Buffer Overflow vulnerability in Bu
KritikCVSS 9,8İstismar yokEPSS %33
- Kimlik doğrulamasız
- Bellek hatası
busybox · busybox26 Haz 2018
CVE-2016-2148
47Planlayın
Heap-based buffer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to have unspecified impact via vecto
KritikCVSS 9,8İstismar yokEPSS %27
- Kimlik doğrulamasız
- Bellek hatası
busybox · busybox9 Şub 2017
CVE-2021-42377
40Planlayın
An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafte
KritikCVSS 9,8İstismar yokEPSS %4
- pre-auth RCE
busybox · busybox15 Kas 2021
CVE-2022-48174
40Planlayın
There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35.
KritikCVSS 9,8İstismar yokEPSS %3
- pre-auth RCE
- Bellek hatası
busybox · busybox22 Ağu 2023
CVE-2017-16544
37İzleyin
In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of fi
YüksekCVSS 8,8İstismar yokEPSS %6
- RCE
busybox · busybox20 Kas 2017
CVE-2022-28391
36İzleyin
BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compat
YüksekCVSS 8,8İstismar yokEPSS %4
- pre-auth RCE
busybox · busybox3 Nis 2022
CVE-2016-6301
33İzleyin
The recv_and_process_client_pkt function in networking/ntpd.c in busybox allows remote attackers to cause a denial of service (CPU and bandw
YüksekCVSS 7,5İstismar yokEPSS %9
- Kimlik doğrulamasız
- Hizmet dışı bırakma
busybox · busybox9 Ara 2016
CVE-2018-1000500
33İzleyin
Busybox contains a Missing SSL certificate validation vulnerability in The "busybox wget" applet that can result in arbitrary code execution
YüksekCVSS 8,1İstismar yokEPSS %2
- pre-auth RCE
- Zayıf kripto
busybox · busybox26 Haz 2018
CVE-2016-2147
32İzleyin
Integer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to cause a denial of service (crash) via a mal
YüksekCVSS 7,5İstismar yokEPSS %8
- Kimlik doğrulamasız
- Bellek hatası
- Hizmet dışı bırakma
busybox · busybox9 Şub 2017
CVE-2018-20679
32İzleyin
An issue was discovered in BusyBox before 1.30.0.
YüksekCVSS 7,5İstismar yokEPSS %8
- Kimlik doğrulamasız
- Bellek hatası
busybox · busybox9 Oca 2019
CVE-2011-5325
32İzleyin
Directory traversal vulnerability in the BusyBox implementation of tar before 1.22.0 v5 allows remote attackers to point to files outside th
YüksekCVSS 7,5İstismar yokEPSS %7
- Kimlik doğrulamasız
- Yol geçişi
busybox · busybox7 Ağu 2017
CVE-2017-3209
32İzleyin
The DBPOWER U818A WIFI quadcopter drone provides FTP access over its own local access point, and allows full file permissions to the anonymous user
YüksekCVSS 8,1İstismar yokEPSS %1
- Kimlik doğrulamasız
dbpower · u818a firmware24 Tem 2018
CVE-2019-5747
31İzleyin
An issue was discovered in BusyBox through 1.30.0.
YüksekCVSS 7,5İstismar yokEPSS %5
- Kimlik doğrulamasız
- Bellek hatası
busybox · busybox9 Oca 2019
CVE-2021-28831
31İzleyin
decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or se
YüksekCVSS 7,5İstismar yokEPSS %3
- Kimlik doğrulamasız
- Hizmet dışı bırakma
busybox · busybox19 Mar 2021
CVE-2022-30065
31İzleyin
A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern
YüksekCVSS 7,8İstismar yokEPSS %1
- Bellek hatası
busybox · busybox18 May 2022
CVE-2023-39810
31İzleyin
An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal.
YüksekCVSS 7,8İstismar yokEPSS %1
- Yol geçişi
busybox · busybox28 Ağu 2023
CVE-2021-42380
29İzleyin
A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the
YüksekCVSS 7,2İstismar yokEPSS %3
- Bellek hatası
busybox · busybox15 Kas 2021
CVE-2021-42379
29İzleyin
A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the
YüksekCVSS 7,2İstismar yokEPSS %3
- Bellek hatası
busybox · busybox15 Kas 2021
CVE-2021-42381
29İzleyin
A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the
YüksekCVSS 7,2İstismar yokEPSS %3
- Bellek hatası
busybox · busybox15 Kas 2021
CVE-2021-42385
29İzleyin
A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the
YüksekCVSS 7,2İstismar yokEPSS %3
- Bellek hatası
busybox · busybox15 Kas 2021
CVE-2021-42382
29İzleyin
A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the
YüksekCVSS 7,2İstismar yokEPSS %3
- Bellek hatası
busybox · busybox15 Kas 2021
CVE-2021-42384
29İzleyin
A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the
YüksekCVSS 7,2İstismar yokEPSS %3
- Bellek hatası
busybox · busybox15 Kas 2021
CVE-2021-42386
29İzleyin
A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the
YüksekCVSS 7,2İstismar yokEPSS %3
- Bellek hatası
busybox · busybox15 Kas 2021
CVE-2021-42378
29İzleyin
A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the
YüksekCVSS 7,2İstismar yokEPSS %3
- Bellek hatası
busybox · busybox15 Kas 2021
CVE-2021-42383
29İzleyin
A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the
YüksekCVSS 7,2İstismar yokEPSS %2
- Bellek hatası
busybox · busybox15 Kas 2021