Skip to content
OpenAdvisories
Medium WID-SEC-2026-3914 3 CVEs

BusyBox: Mehrere Schwachstellen

Published Oct 13, 2026 · Updated Nov 11, 2026 · Revision 2 · de

Vendor: Red Hat Product: Enterprise Linux Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in BusyBox ausnutzen, um einen Denial of Service Angriff durchzuführen, Informationen offenzulegen oder Sicherheitsmaßnahmen zu umgehen.

Product

BusyBox ist ein Computerprogramm, das verschiedene Standard-Unix-Dienstprogramme in einem einzelnen Programm vereint.

Vulnerabilities 3

  • Medium 6.5
    CVE-2026-88833

    Busybox: busybox: udhcpc integer underflow in dhcp packet length calculation causes denial of service

    A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP header without re-validating the minimum size. This leads to an integer underflow…

    Red Hat Red Hat Enterprise Linux 6 Red Hat Hardened Images busybox Linux Debian Ubuntu Azure Linux
  • Medium 5.5
    CVE-2026-88838

    Busybox: busybox: non-root mount option filter bypass allows clearing fstab security restrictions

    A flaw was found in BusyBox's mount utility. A non-root user can bypass mount security restrictions set in /etc/fstab by specifying clearing-mask options on the command line. These options pass the non-root flag filter and are merged with fstab options as str…

    Red Hat Red Hat Hardened Images busybox busybox Debian Ubuntu Azure Linux
  • Low 3.7
    CVE-2026-88834

    Busybox: busybox: httpd user existence oracle in non-default shadow-disabled builds

    A flaw was found in BusyBox's httpd web server. When configured with system password authentication, a user existence oracle may exist in certain build configurations. An attacker could distinguish existing from non-existing usernames by observing authenticat…

    Red Hat Red Hat Hardened Images busybox busybox Debian Ubuntu Azure Linux

Revision history

  1. #2

    Neue Updates von Red Hat aufgenommen

  2. #1

    Initiale Fassung

References