https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:32:51 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-02427 bdu:2021-02427 https://cve.radiocsirt.org/vuln/bdu:2021-02427 https://cve.radiocsirt.org/vuln/bell-cve-2021-28831 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2021-28831 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0453 certfr-2023-avi-0453 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0453 https://cve.radiocsirt.org/vuln/euvd-2026-263949 EUVD-2026-263949 https://cve.radiocsirt.org/vuln/euvd-2026-263949 https://cve.radiocsirt.org/vuln/fkie_cve-2021-28831 <p>decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.</p> <p>decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-28831 https://cve.radiocsirt.org/vuln/ghsa-7w53-225r-6vxv <p>decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.</p> <p>decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.</p> https://cve.radiocsirt.org/vuln/ghsa-7w53-225r-6vxv https://cve.radiocsirt.org/vuln/gsd-2021-28831 gsd-2021-28831 https://cve.radiocsirt.org/vuln/gsd-2021-28831 https://cve.radiocsirt.org/vuln/icsa-23-166-10 <p>The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, leading to a denial of service. The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read. A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path that, when processed by the glob function, would potentially lead to arbitrary code execution. This was fixed in version 2.32. The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function contains a non-canonical bit pattern, a seen when passing a 0x5d414141414141410000 value to sinl on x86 targets. This is related to sysdeps/ieee754/ldbl-96/e_rem_pio2l.c. The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390, and IBM1399 encodings, fails to advance the input state, which could lead to an infinite lo…</p> <p>The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, leading to a denial of service. The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read. A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path that, when processed by the glob function, would potentially lead to arbitrary code execution. This was fixed in version 2.32. The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function contains a non-canonical bit pattern, a seen when passing a 0x5d414141414141410000 value to sinl on x86 targets. This is related to sysdeps/ieee754/ldbl-96/e_rem_pio2l.c. The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390, and IBM1399 encodings, fails to advance the input state, which could lead to an infinite lo…</p> https://cve.radiocsirt.org/vuln/icsa-23-166-10 https://cve.radiocsirt.org/vuln/msrc_cve-2021-28831 msrc_CVE-2021-28831 https://cve.radiocsirt.org/vuln/msrc_cve-2021-28831 https://cve.radiocsirt.org/vuln/oesa-2021-1162 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: busybox</p> <p>BusyBox combines tiny versions of many common UNIX utilities into a single small executable. It provides replacements for most of the utilities you usually find in GNU fileutils, shellutils, etc. It provides a fairly complete environment for any small or embedded system. Security Fix(es): decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.(CVE-2021-28831)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: busybox</p> <p>BusyBox combines tiny versions of many common UNIX utilities into a single small executable. It provides replacements for most of the utilities you usually find in GNU fileutils, shellutils, etc. It provides a fairly complete environment for any small or embedded system. Security Fix(es): decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.(CVE-2021-28831)</p> https://cve.radiocsirt.org/vuln/oesa-2021-1162 https://cve.radiocsirt.org/vuln/opensuse-su-2021:1408-1 <p>Security update for busybox</p> <p>Security update for busybox</p> https://cve.radiocsirt.org/vuln/opensuse-su-2021:1408-1 https://cve.radiocsirt.org/vuln/suse-su-2021:3531-1 <p>Security update for busybox</p> <p>Security update for busybox</p> https://cve.radiocsirt.org/vuln/suse-su-2021:3531-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-28831 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: busybox, Ubuntu:Pro:16.04:LTS: busybox, Ubuntu:18.04:LTS: busybox, Ubuntu:20.04:LTS: busybox, Ubuntu:22.04:LTS: busybox</p> <p>decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: busybox, Ubuntu:Pro:16.04:LTS: busybox, Ubuntu:18.04:LTS: busybox, Ubuntu:20.04:LTS: busybox, Ubuntu:22.04:LTS: busybox</p> <p>decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-28831 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2029 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in BusyBox ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in BusyBox ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2029