https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:08:03.938858+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bell-cve-2026-38754 BELL-CVE-2026-38754 2026-10-02T22:08:04.113097+00:00

Affected: Alpaquita:23: busybox, Alpaquita:25: busybox, Alpaquita:stream: busybox, BellSoft Hardened Containers:23: busybox, BellSoft Hardened Containers:25: busybox, BellSoft Hardened Containers:stream: busybox

 https://cve.radiocsirt.org/vuln/euvd-2026-339401 EUVD-2026-339401 2026-10-02T22:08:04.113189+00:00 EUVD-2026-339401 https://cve.radiocsirt.org/vuln/fkie_cve-2026-38754 fkie_cve-2026-38754 2026-10-02T22:08:04.113217+00:00

A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.

 https://cve.radiocsirt.org/vuln/ghsa-jj7c-h3wm-vjfw GHSA-jj7c-h3wm-vjfw 2026-10-02T22:08:04.113264+00:00

A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-38754 msrc_CVE-2026-38754 — A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Ser… 2026-10-02T22:08:04.113298+00:00 msrc_CVE-2026-38754 https://cve.radiocsirt.org/vuln/oesa-2026-3312 OESA-2026-3312 — busybox security update 2026-10-02T22:08:04.113337+00:00

Affected: openEuler:24.03-LTS-SP1: busybox, openEuler:24.03-LTS-SP3: busybox, openEuler:24.03-LTS-SP4: busybox, openEuler:20.03-LTS-SP4: busybox, openEuler:22.03-LTS-SP4: busybox

The Swiss Army Knife of Embedded Linux Security Fix(es):

A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script.(CVE-2026-38752)

A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script.(CVE-2026-38753)

A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.(CVE-2026-38754)

A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.(CVE-2026-38755)

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11605-1 openSUSE-SU-2026:11605-1 — busybox-1.38.0-2.1 on GA media 2026-10-02T22:08:04.113422+00:00

busybox-1.38.0-2.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:41130 RHSA-2026:41130 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update 2026-10-02T22:08:04.113461+00:00

busybox: Busybox: Denial of Service via crafted AWK script in awk_sub() function busybox: Busybox: Denial of Service via heap overflow in ifsbreakup() function

 https://cve.radiocsirt.org/vuln/suse-su-2026:23446-1 SUSE-SU-2026:23446-1 — Security update for busybox 2026-10-02T22:08:04.113505+00:00

Security update for busybox

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-38754 UBUNTU-CVE-2026-38754 2026-10-02T22:08:04.113525+00:00

Affected: Ubuntu:Pro:14.04:LTS: busybox, Ubuntu:Pro:16.04:LTS: busybox, Ubuntu:Pro:18.04:LTS: busybox, Ubuntu:20.04:LTS: busybox, Ubuntu:22.04:LTS: busybox, Ubuntu:24.04:LTS: busybox, Ubuntu:26.04:LTS: busybox

A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2386 WID-SEC-W-2026-2386 — BusyBox: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-02T22:08:04.113557+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in BusyBox ausnutzen, um einen Denial of Service Angriff durchzuführen.