https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 11:04:22 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-05995 bdu:2025-05995 https://cve.radiocsirt.org/vuln/bdu:2025-05995 https://cve.radiocsirt.org/vuln/bell-cve-2021-42375 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2021-42375 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0220 certfr-2023-avi-0220 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0220 https://cve.radiocsirt.org/vuln/cnvd-2021-89689 cnvd-2021-89689 https://cve.radiocsirt.org/vuln/cnvd-2021-89689 https://cve.radiocsirt.org/vuln/euvd-2026-234616 EUVD-2026-234616 https://cve.radiocsirt.org/vuln/euvd-2026-234616 https://cve.radiocsirt.org/vuln/fkie_cve-2021-42375 <p>An incorrect handling of a special element in Busybox&#39;s ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.</p> <p>An incorrect handling of a special element in Busybox&#39;s ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-42375 https://cve.radiocsirt.org/vuln/ghsa-h7xx-2pfg-qqhm <p>An incorrect handling of a special element in Busybox&#39;s ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.</p> <p>An incorrect handling of a special element in Busybox&#39;s ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.</p> https://cve.radiocsirt.org/vuln/ghsa-h7xx-2pfg-qqhm https://cve.radiocsirt.org/vuln/gsd-2021-42375 gsd-2021-42375 https://cve.radiocsirt.org/vuln/gsd-2021-42375 https://cve.radiocsirt.org/vuln/icsa-23-075-01 <p>zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches. An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory, aka &#39;Windows Kernel Information Disclosure Vulnerability&#39;. This CVE ID is unique from CVE-2019-1071, CVE-2019-1073. A local privilege escalation vulnerability was found on polkit&#39;s pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn&#39;t handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it&#39;ll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine. A vulnerability was found in btrfs_alloc_tree_b in fs/btrfs/extent-tree.c in the Linux kernel due to an improper lock operation in btrfs. In this flaw, a user with a local privilege may cause a denial of service (DOS) due to a deadlock problem. LFENCE/JMP (mitigation V2-2) may not sufficiently mitigate CVE-2017-5715 on some AMD CPUs. A NULL pointer dereference in Busybox&#39;s man applet leads to denial of service when a section name is supplied but no page argument is given. An out-of-bounds hea…</p> <p>zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches. An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory, aka &#39;Windows Kernel Information Disclosure Vulnerability&#39;. This CVE ID is unique from CVE-2019-1071, CVE-2019-1073. A local privilege escalation vulnerability was found on polkit&#39;s pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn&#39;t handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it&#39;ll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine. A vulnerability was found in btrfs_alloc_tree_b in fs/btrfs/extent-tree.c in the Linux kernel due to an improper lock operation in btrfs. In this flaw, a user with a local privilege may cause a denial of service (DOS) due to a deadlock problem. LFENCE/JMP (mitigation V2-2) may not sufficiently mitigate CVE-2017-5715 on some AMD CPUs. A NULL pointer dereference in Busybox&#39;s man applet leads to denial of service when a section name is supplied but no page argument is given. An out-of-bounds hea…</p> https://cve.radiocsirt.org/vuln/icsa-23-075-01 https://cve.radiocsirt.org/vuln/opensuse-su-2022:0135-1 <p>Security update for busybox</p> <p>Security update for busybox</p> https://cve.radiocsirt.org/vuln/opensuse-su-2022:0135-1 https://cve.radiocsirt.org/vuln/suse-su-2022:0135-1 <p>Security update for busybox</p> <p>Security update for busybox</p> https://cve.radiocsirt.org/vuln/suse-su-2022:0135-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-42375 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: busybox, Ubuntu:20.04:LTS: busybox, Ubuntu:22.04:LTS: busybox</p> <p>An incorrect handling of a special element in Busybox&#39;s ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: busybox, Ubuntu:20.04:LTS: busybox, Ubuntu:22.04:LTS: busybox</p> <p>An incorrect handling of a special element in Busybox&#39;s ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-42375 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2028 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in BusyBox ausnutzen, um einen Denial of Service Angriff durchzuführen, Informationen offenzulegen oder beliebigen Code auszuführen.</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in BusyBox ausnutzen, um einen Denial of Service Angriff durchzuführen, Informationen offenzulegen oder beliebigen Code auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2028