Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*

2 briefs RSS
low advisory

Heap Buffer Overflow in BusyBox TLS Montgomery Reduction

A unit confusion vulnerability in BusyBox TLS Montgomery reduction buffer allocation allows remote unauthenticated attackers to trigger a heap buffer overflow via a crafted ClientKeyExchange message, potentially enabling code execution.

BusyBox cve vulnerability memory-corruption
1c
high advisory

Arbitrary Code Execution in BusyBox via Heap Buffer Overflow

A heap-based buffer overflow vulnerability (CVE-2022-30065) in BusyBox allows a local attacker to execute arbitrary code and compromise system integrity.

BusyBox
1t 1c