CVE-2026-38754

Опубликовано: 20 июл. 2026

Источник: msrc

CVSS3: 7.5

EPSS Низкий

Описание

A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.

EPSS

Процентиль: 15%

0.00235

Низкий

7.5 High

CVSS3

Связанные уязвимости

CVE-2026-38754

CVSS3: 5.1

ubuntu

22 дня назад

A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.

CVE-2026-38754

CVSS3: 5.1

nvd

22 дня назад

A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.

CVE-2026-38754

CVSS3: 5.1

debian

22 дня назад

A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox ...

GHSA-jj7c-h3wm-vjfw

CVSS3: 7.5

github

22 дня назад

A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.

EPSS

Процентиль: 15%

0.00235

Низкий

7.5 High

CVSS3