Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-28391

Опубликовано: 03 апр. 2022
Источник: nvd
CVSS3: 8.8
CVSS2: 6.8
EPSS Низкий

Описание

BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*
Версия до 1.35.0 (включая)

EPSS

Процентиль: 88%
0.03492
Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

NVD-CWE-noinfo
CWE-88

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 4 лет назад

BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.

CVSS3: 6.5
redhat
больше 4 лет назад

BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.

CVSS3: 8.8
msrc
5 месяцев назад

BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively the attacker could choose to change the terminal's colors.

CVSS3: 8.8
debian
больше 4 лет назад

BusyBox through 1.35.0 allows remote attackers to execute arbitrary co ...

CVSS3: 9.8
github
больше 4 лет назад

BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.

EPSS

Процентиль: 88%
0.03492
Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

NVD-CWE-noinfo
CWE-88