CVE-2026-38755

Опубликовано: 20 июл. 2026

Источник: msrc

CVSS3: 7.5

EPSS Низкий

Описание

A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.

EPSS

Процентиль: 11%

0.00207

Низкий

7.5 High

CVSS3

Связанные уязвимости

CVE-2026-38755

CVSS3: 2.9

ubuntu

22 дня назад

A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.

CVE-2026-38755

CVSS3: 5.5

redhat

23 дня назад

A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.

CVE-2026-38755

CVSS3: 2.9

nvd

22 дня назад

A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.

CVE-2026-38755

CVSS3: 2.9

debian

22 дня назад

A heap overflow in the evalcommand() function (shell/ash.c) of Busybox ...

GHSA-jcqv-rj94-jmx3

CVSS3: 7.5

github

22 дня назад

A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.

EPSS

Процентиль: 11%

0.00207

Низкий

7.5 High

CVSS3