CVE-2025-46394

Опубликовано: 23 апр. 2025

Источник: nvd

CVSS3: 3.2

CVSS3: 3.3

EPSS Низкий

Описание

In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.

Ссылки

https://bugs.busybox.net/show_bug.cgi?id=16018
Issue Tracking
https://www.busybox.net
Product
https://www.busybox.net/downloads/
Product
http://www.openwall.com/lists/oss-security/2025/04/23/5
Mailing List
http://www.openwall.com/lists/oss-security/2025/04/24/3
Mailing List

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*

Версия до 1.37.0 (включая)

EPSS

Процентиль: 8%

0.00031

Низкий

3.2 Low

CVSS3

3.3 Low

CVSS3

Дефекты

CWE-451

Связанные уязвимости

CVE-2025-46394

CVSS3: 3.2

ubuntu

10 месяцев назад

In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.

CVE-2025-46394

msrc

2 месяца назад

In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.

CVE-2025-46394

CVSS3: 3.2

debian

10 месяцев назад

In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...

GHSA-wp4q-9jq4-gv74

CVSS3: 3.2

github

10 месяцев назад

In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.

openSUSE-SU-2026:20090-1

suse-cvrf

16 дней назад

Security update for busybox

EPSS

Процентиль: 8%

0.00031

Низкий

3.2 Low

CVSS3

3.3 Low

CVSS3

Дефекты

CWE-451