Описание
A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.
A flaw was found in Busybox. A heap overflow vulnerability in the evalcommand() function allows attackers to cause a Denial of Service (DoS) by supplying a specially crafted input. This can lead to the unavailability of the service.
Отчет
This Moderate impact flaw in Busybox's evalcommand() function can lead to a Denial of Service. The vulnerability requires an attacker to supply specially crafted input, which typically implies existing local access or specific application interactions within the Busybox environment, thus limiting the direct exposure.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | busybox | Out of support scope | ||
| Red Hat Hardened Images | busybox-main-1.37.0-8.2.hum1 | Fixed | RHSA-2026:42074 | 20.07.2026 |
Показывать по
Дополнительная информация
Статус:
5.5 Medium
CVSS3
Связанные уязвимости
A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.
A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.
A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.
A heap overflow in the evalcommand() function (shell/ash.c) of Busybox ...
A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.
5.5 Medium
CVSS3