3.2
Faible
CVE-2025-46394 In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal…
Description
In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| busybox 1.37 | premières → 1.37.0 | Pas de correctif indiqué |
| RUGGEDCOM RST2428P 4.0 | premières → < 4.0 | 4.0 |
Références
- bugs.busybox.net bugs.busybox.net
- www.busybox.net www.busybox.net
- www.busybox.net www.busybox.net
Chronologie
- Publiée
- Dernière modification
Autres CVE de busybox
Les 21 CVE de busybox →
CVE-2026-92205
BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability
6.1
Moyenne
CVE-2026-38753
A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a Denial of…
4.9
Moyenne
CVE-2026-38752
A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to cause a…
2.9
Faible
CVE-2026-38754
A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of…
5.1
Moyenne