Summary
Ein Angreifer kann mehrere Schwachstellen in BusyBox ausnutzen, um möglicherweise beliebigen Code auszuführen, Speicher zu beschädigen, sensible Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen oder Denial-of-Service-Zustände zu verursachen.
Product
BusyBox ist ein Computerprogramm, das verschiedene Standard-Unix-Dienstprogramme in einem einzelnen Programm vereint.
Vulnerabilities 7
-
High 7.5
Busybox: busybox: tls montgomery reduction allocates bytes instead of digits, causing a pre-auth heap buffer overflow
A unit confusion in BusyBox TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted ClientKeyExchange message.
-
High 7.3
Busybox: busybox: romfs volume id parsing performs unbounded memcpy into fixed-size label buffer, causing heap overflow
BusyBox romfs volume ID parsing uses unbounded strlen on attacker-controlled metadata, causing a heap buffer overflow when processing crafted filesystem images.
-
Medium 6.7
Busybox: busybox: passwd/group parser writes heap pointers out of bounds due to stale tokenize() endpoint
BusyBox passwd/group tokenize() references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap pointers.
-
Medium 6.5
Busybox: busybox: httpd misidentifies yescrypt password hashes as plaintext, inverting authentication
BusyBox httpd treats yescrypt ($y$) password hashes as plaintext during Basic Authentication, inverting the authentication check.
-
Medium 6.1
Busybox: busybox: dpkg read_package_field() steps past nul terminator, causing out-of-bounds read on malformed .deb packages
BusyBox dpkg read_package_field() steps past a NUL terminator on malformed .deb packages, causing an out-of-bounds heap read.
-
Medium 5.3
Busybox: busybox: httpd silently fails open when ip deny rules contain invalid cidr prefix lengths
BusyBox httpd IP deny rules with invalid CIDR prefix lengths fail open, leaving a parsed IP with a zeroed mask so the rule matches no clients.
-
Medium 5.3
Busybox: busybox: tls ssl_server reads one byte out of bounds when parsing truncated clienthello
BusyBox TLS get_client_hello() reads past the end of the input buffer when parsing a truncated ClientHello message.
Revision history
-
#6
Neue Updates von SUSE aufgenommen
-
#5
Neue Updates von SUSE aufgenommen
-
#4
Neue Updates von openSUSE aufgenommen
-
#3
Neue Updates von SUSE aufgenommen
-
#2
Neue Updates von openSUSE aufgenommen
-
#1
Initiale Fassung
References
-
GitHub Advisory Database vom 2026-09-23
https://github.com/advisories/GHSA-f9qv-fq2p-pvch
-
GitHub Advisory Database vom 2026-09-23
https://github.com/advisories/GHSA-w878-vhh4-m5pv
-
GitHub Advisory Database vom 2026-09-23
https://github.com/advisories/GHSA-fr4j-cp66-9wc4
-
GitHub Advisory Database vom 2026-09-23
https://github.com/advisories/GHSA-263v-w343-472x
-
GitHub Advisory Database vom 2026-09-23
https://github.com/advisories/GHSA-w27x-jw4w-69xf
-
GitHub Advisory Database vom 2026-09-23
https://github.com/advisories/GHSA-mv57-fr8w-22gj
-
GitHub Advisory Database vom 2026-09-23
https://github.com/advisories/GHSA-hqw2-f49w-7w56
-
openSUSE Security Update OPENSUSE-SU-2026:11954-1 vom 2026-10-07
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GCZEIVMD54KUYJ7UFOGNXEJPX32CEILX/
-
SUSE Security Update SUSE-SU-2026:24137-1 vom 2026-10-13
https://lists.suse.com/pipermail/sle-security-updates/2026-October/029803.html
-
openSUSE Security Update OPENSUSE-SU-2026:22067-1 vom 2026-10-18
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/I5A7I2VMIL5L4RMDHV3FO3ZYTVU23HND/
-
SUSE Security Update SUSE-SU-2026:4760-1 vom 2026-10-20
https://lists.suse.com/pipermail/sle-security-updates/2026-October/029968.html
-
SUSE Security Update SUSE-SU-2026:24215-1 vom 2026-10-20
https://lists.suse.com/pipermail/sle-security-updates/2026-October/029946.html
-
SUSE Security Update SUSE-SU-2026:4773-1 vom 2026-10-21
https://lists.suse.com/pipermail/sle-security-updates/2026-October/029970.html
-
SUSE Security Update SUSE-SU-2026:4798-1 vom 2026-10-21
https://lists.suse.com/pipermail/sle-security-updates/2026-October/029985.html