GHSA-jj7c-h3wm-vjfw

Опубликовано: 16 июл. 2026

Источник: github

Github: Не прошло ревью

CVSS3: 7.5

Описание

A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.

Ссылки

EPSS

Процентиль: 15%

0.00235

Низкий

7.5 High

CVSS3

CVE ID

CVE-2026-38754

Дефекты

CWE-122

CWE-125

Связанные уязвимости

CVE-2026-38754

CVSS3: 5.1

ubuntu

22 дня назад

A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.

CVE-2026-38754

CVSS3: 5.1

nvd

22 дня назад

A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.

CVE-2026-38754

CVSS3: 7.5

msrc

17 дней назад

A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.

CVE-2026-38754

CVSS3: 5.1

debian

22 дня назад

A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox ...

EPSS

Процентиль: 15%

0.00235

Низкий

7.5 High

CVSS3

CVE ID

CVE-2026-38754

Дефекты

CWE-122

CWE-125