BusyBox: Mehrere Schwachstellen ermöglichen Denial of Service

Summary

Product

Vulnerabilities 4

• Medium 5.1
  CVE-2026-38754

  A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Ser…

  BusyBox BusyBox busybox busybox Debian Ubuntu Azure Linux Wolfi
  Jul 15, 2026
• Medium 4.9
  CVE-2026-38753

  A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a Denial of Ser…

  BusyBox BusyBox busybox busybox Debian Ubuntu Azure Linux Wolfi
  Jul 15, 2026
• Low 2.9
  CVE-2026-38752

  A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to cause a Denial…

  BusyBox BusyBox busybox busybox Debian Ubuntu Azure Linux Wolfi
  Jul 15, 2026
• Low 2.9
  CVE-2026-38755

  A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Se…

  BusyBox BusyBox busybox busybox Debian Ubuntu Azure Linux Wolfi
  Jul 15, 2026

Revision history

1. 2026-10-15 #7

   Neue Updates von SUSE aufgenommen

2. 2026-10-08 #6

   Neue Updates von openSUSE aufgenommen

3. 2026-09-13 #5

   Neue Updates von SUSE aufgenommen

4. 2026-09-09 #4

   Neue Updates von SUSE aufgenommen

5. 2026-07-20 #3

   Neue Updates von Red Hat aufgenommen

6. 2026-07-16 #2

   Neue Updates von Red Hat aufgenommen

7. 2026-07-15 #1

   Initiale Fassung

References

• GitHub Advisory Database vom 2026-07-15
  https://github.com/advisories/GHSA-FJ27-X67R-V4G5
• GitHub Advisory Database vom 2026-07-15
  https://github.com/advisories/GHSA-9R55-P3JW-V652
• GitHub Advisory Database vom 2026-07-15
  https://github.com/advisories/GHSA-JJ7C-H3WM-VJFW
• GitHub Advisory Database vom 2026-07-15
  https://github.com/advisories/GHSA-JCQV-RJ94-JMX3
• Red Hat Security Advisory RHSA-2026:41130 vom 2026-07-17
  https://access.redhat.com/errata/RHSA-2026:41130
• Red Hat Security Advisory RHSA-2026:42074 vom 2026-07-20
  https://access.redhat.com/errata/RHSA-2026:42074
• SUSE Security Update SUSE-SU-2026:3933-1 vom 2026-09-10
  https://lists.suse.com/pipermail/sle-security-updates/2026-September/028800.html
• SUSE Security Update SUSE-SU-2026:3900-1 vom 2026-09-10
  https://lists.suse.com/pipermail/sle-security-updates/2026-August/028715.html
• SUSE Security Update SUSE-SU-2026:3908-1 vom 2026-09-10
  https://lists.suse.com/pipermail/sle-security-updates/2026-September/028732.html
• SUSE Security Update SUSE-SU-2026:23446-1 vom 2026-09-12
  https://lists.suse.com/pipermail/sle-security-updates/2026-September/028816.html
• openSUSE Security Update OPENSUSE-SU-2026:22040-1 vom 2026-10-08
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ITWYPUKHQGCP77THOE5MN5BXN2CBNWKV/
• SUSE Security Update SUSE-SU-2026:24154-1 vom 2026-10-15
  https://lists.suse.com/pipermail/sle-security-updates/2026-October/029862.html