The Vigil@nce team watches public vulnerabilities impacting your computers, and then offers security solutions, a vigilance database and tools to fix them.

Computer vulnerabilities of BusyBox

BusyBox: out-of-bounds memory reading via DHCP_SUBNET
An attacker can force a read at an invalid address via DHCP_SUBNET of BusyBox, in order to trigger a denial of service, or to obtain sensitive information...
CVE-2019-5747, USN-3935-1, VIGILANCE-VUL-28234
BusyBox: out-of-bounds memory reading via udhcp_get_option
An attacker can force a read at an invalid address via udhcp_get_option() of BusyBox, in order to trigger a denial of service, or to obtain sensitive information...
CVE-2018-20679, USN-3935-1, VIGILANCE-VUL-28233
BusyBox: buffer overflow via DHCP Client OPTION_6RD
An attacker can generate a buffer overflow via DHCP Client OPTION_6RD of BusyBox, in order to trigger a denial of service, and possibly to run code...
CVE-2016-2148, DLA-1445-1, DLA-1445-2, DLA-1445-3, USN-3935-1, VIGILANCE-VUL-26858
BusyBox: integer overflow via DHCP Client
An attacker can generate an integer overflow via DHCP Client of BusyBox, in order to trigger a denial of service, and possibly to run code...
CVE-2016-2147, DLA-1445-1, DLA-1445-2, DLA-1445-3, USN-3935-1, VIGILANCE-VUL-26857
BusyBox: denial of service via huft_build
An attacker can generate a fatal error via huft_build() of BusyBox, in order to trigger a denial of service...
CVE-2015-9261, DLA-1445-1, DLA-1445-2, DLA-1445-3, USN-3935-1, VIGILANCE-VUL-26856
BusyBox: Man-in-the-Middle via wget
An attacker can act as a Man-in-the-Middle via wget on BusyBox, in order to read or write data in the session...
CVE-2018-1000500, VIGILANCE-VUL-26552
BusyBox: buffer overflow via wget
An attacker can generate a buffer overflow via wget of BusyBox, in order to trigger a denial of service, and possibly to run code...
CVE-2018-1000517, DLA-1445-1, DLA-1445-2, DLA-1445-3, USN-3935-1, VIGILANCE-VUL-26551
BusyBox: code execution via AutoComplete
An attacker can use a vulnerability via AutoComplete of BusyBox, in order to run code...
CVE-2017-16544, DLA-1445-1, DLA-1445-2, DLA-1445-3, USN-3935-1, VIGILANCE-VUL-24504, VMSA-2019-0013
BusyBox: integer overflow via decompress_unlzma.c
An attacker can generate an integer overflow via decompress_unlzma.c of BusyBox, in order to trigger a denial of service, and possibly to run code...
10436, CVE-2017-15874, VIGILANCE-VUL-24230
BusyBox: integer overflow via get_next_block
An attacker can generate an integer overflow via get_next_block() of BusyBox, in order to trigger a denial of service, and possibly to run code...
10431, CVE-2017-15873, DLA-1445-1, DLA-1445-2, DLA-1445-3, USN-3935-1, VIGILANCE-VUL-24229
Our database contains other pages. You can request a free trial to read them.

Display information about BusyBox: