Most recent entries from all

EUVD-2026-377163

2026-10-03T19:35:35.356538+00:00

EUVD-2026-377163

fkie_cve-2026-88839

2026-10-03T19:35:35.356619+00:00

BusyBox passwd/group tokenize() references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap pointers.

GHSA-fr4j-cp66-9wc4

2026-10-03T19:35:35.356691+00:00

BusyBox passwd/group tokenize() references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap pointers.

msrc_CVE-2026-88839 — Busybox: busybox: passwd/group parser writes heap pointers out of bounds due to stale tokenize() endpoint

2026-10-03T19:35:35.356709+00:00

msrc_CVE-2026-88839

openSUSE-SU-2026:11954-1 — busybox-1.38.0-3.1 on GA media

2026-10-03T19:35:35.356729+00:00

busybox-1.38.0-3.1 on GA media

RHSA-2026:72111 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

2026-10-03T19:35:35.356752+00:00

busybox: busybox: httpd silently fails open when IP deny rules contain invalid CIDR prefix lengths busybox: busybox: romfs volume ID parsing performs unbounded memcpy into fixed-size label buffer, causing heap overflow busybox: busybox: dpkg read_package_field() steps past NUL terminator, causing out-of-bounds read on malformed .deb packages busybox: busybox: httpd misidentifies yescrypt password hashes as plaintext, inverting authentication busybox: busybox: passwd/group parser writes heap pointers out of bounds due to stale tokenize() endpoint

UBUNTU-CVE-2026-88839

2026-10-03T19:35:35.356780+00:00

Affected: Ubuntu:Pro:14.04:LTS: busybox, Ubuntu:Pro:16.04:LTS: busybox, Ubuntu:Pro:18.04:LTS: busybox, Ubuntu:20.04:LTS: busybox, Ubuntu:22.04:LTS: busybox, Ubuntu:24.04:LTS: busybox, Ubuntu:26.04:LTS: busybox

BusyBox passwd/group tokenize() references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap pointers.

WID-SEC-W-2026-3557 — BusyBox: Mehrere Schwachstellen

2026-10-03T19:35:35.356815+00:00

Ein Angreifer kann mehrere Schwachstellen in BusyBox ausnutzen, um möglicherweise beliebigen Code auszuführen, Speicher zu beschädigen, sensible Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen oder Denial-of-Service-Zustände zu verursachen.