Описание
In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| busybox | fixed | 1:1.37.0-8 | package | |
| busybox | postponed | trixie | package | |
| busybox | postponed | bookworm | package | |
| busybox | postponed | bullseye | package |
Примечания
https://bugs.busybox.net/show_bug.cgi?id=16018
https://www.openwall.com/lists/oss-security/2025/04/23/1
Proposed patch: https://lists.busybox.net/pipermail/busybox/2025-April/091461.html
EPSS
Связанные уязвимости
In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.
In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.
In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.
In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.
Уязвимость набора UNIX-утилит командной строки BusyBox, связанная с ошибками представления информации пользовательским интерфейсом, позволяющая нарушителю проводить спуфинг-атаки
EPSS