CVE-2026-38754

Опубликовано: 15 июл. 2026

Источник: nvd

CVSS3: 5.1

CVSS3: 7.5

EPSS Низкий

Описание

A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.

Ссылки

https://busybox.net
https://lists.busybox.net/pipermail/busybox/2026-June/092353.html
Mailing List
Patch
Vendor Advisory
https://lists.busybox.net/pipermail/busybox/2026-June/092360.html

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:busybox:busybox:1.38.0:*:*:*:*:*:*:*

EPSS

Процентиль: 15%

0.00235

Низкий

5.1 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-125

CWE-122

Связанные уязвимости

CVE-2026-38754

CVSS3: 5.1

ubuntu

22 дня назад

A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.

CVE-2026-38754

CVSS3: 7.5

msrc

17 дней назад

A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.

CVE-2026-38754

CVSS3: 5.1

debian

22 дня назад

A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox ...

GHSA-jj7c-h3wm-vjfw

CVSS3: 7.5

github

22 дня назад

A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.

EPSS

Процентиль: 15%

0.00235

Низкий

5.1 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-125

CWE-122