Summary
Ein Angreifer kann mehrere Schwachstellen in BusyBox ausnutzen, um Informationen offenzulegen, beliebigen Code mit erhöhten Berechtigungen bis hin zu Root-Rechten auszuführen oder einen Denial-of-Service-Zustand zu verursachen.
Product
BusyBox ist ein Computerprogramm, das verschiedene Standard-Unix-Dienstprogramme in einem einzelnen Programm vereint.
Vulnerabilities 7
-
High 7.6
Busybox: stack buffer overflow in udhcpc6 send_d6_renew() and send_d6_release()
A flaw was found in BusyBox. The udhcpc6 DHCPv6 client does not properly validate the size of network options sent by a server before copying them into memory. A malicious DHCPv6 server on the local network can exploit this flaw by sending a crafted reply, tr…
-
High 7.5
Busybox: heap buffer overflow in the tftp client on fallback to the default block size
A flaw was found in BusyBox. When the TFTP (Trivial File Transfer Protocol) client requests a custom small block size and receives a standard response, it falls back to the default block size without resizing the allocated memory buffer. A malicious TFTP serv…
-
High 7.5
Busybox: httpd stack buffer overflow via an "i:" rule in a subdirectory httpd.conf
A flaw was found in BusyBox. When the httpd web server processes subdirectory configuration files, an overly long index page name can trigger a stack-based buffer overflow. An attacker with permissions to write to a subdirectory configuration file could explo…
-
Medium 5.5
Busybox: divide-by-zero in the volume_id fat prober via a zero sectors_per_cluster value
A flaw was found in BusyBox. The volume identification component fails to properly validate cluster parameters when analyzing specially formatted FAT filesystems. An attacker able to present a crafted storage device or disk image can trigger a divide-by-zero …
-
Medium 5.5
Busybox: divide-by-zero and heap over-read in the volume_id hfs+ prober
A flaw was found in BusyBox. When processing filesystem metadata, the volume identification component does not properly validate header values in HFS+ filesystems. An attacker able to attach a storage device or supply a specially crafted filesystem image can …
-
Medium 5.3
Busybox: httpd password rule bypass for pre-compressed .gz files via accept-encoding: gzip
A flaw was found in BusyBox. When the HTTP daemon (httpd) has pre-compressed file support enabled, authentication checks are evaluated only against the requested URL path rather than the pre-compressed file being served. A remote attacker can exploit this fla…
-
Medium 4.3
Busybox: use-after-free of requested_ipv6 in udhcpc6
A flaw was found in BusyBox's udhcpc6 DHCPv6 client. A malicious server on the local network can trigger a use-after-free condition by responding with a crafted Dynamic Host Configuration Protocol for IPv6 (DHCPv6) reply packet lacking usable address options.…
Revision history
-
#2
Neue Updates von Red Hat aufgenommen
-
#1
Initiale Fassung
References
-
CVE Record vom 2026-11-10
https://www.cve.org/CVERecord?id=CVE-2026-124737
-
CVE Record vom 2026-11-10
https://www.cve.org/CVERecord?id=CVE-2026-124738
-
CVE Record vom 2026-11-10
https://www.cve.org/CVERecord?id=CVE-2026-124739
-
CVE Record vom 2026-11-10
https://www.cve.org/CVERecord?id=CVE-2026-124740
-
CVE Record vom 2026-11-10
https://www.cve.org/CVERecord?id=CVE-2026-124741
-
CVE Record vom 2026-11-10
https://www.cve.org/CVERecord?id=CVE-2026-124742
-
CVE Record vom 2026-11-10
https://www.cve.org/CVERecord?id=CVE-2026-124743
-
Red Hat Security Advisory RHSA-2026:99577 vom 2026-11-12
https://access.redhat.com/errata/RHSA-2026:99577