Skip to content
Threat Feed

Product

BusyBox

5 briefs RSS
medium advisory

Remote Code Execution Vulnerability in BusyBox

A vulnerability in BusyBox allows an unauthenticated remote attacker to execute arbitrary code and escalate privileges, posing a significant risk to embedded Linux systems.

BusyBox vulnerability remote-code-execution embedded-systems
2t
low advisory

Heap Buffer Overflow in BusyBox TLS Montgomery Reduction

A unit confusion vulnerability in BusyBox TLS Montgomery reduction buffer allocation allows remote unauthenticated attackers to trigger a heap buffer overflow via a crafted ClientKeyExchange message, potentially enabling code execution.

BusyBox cve vulnerability memory-corruption
1c
high advisory

BusyBox Multiple Vulnerabilities Allow Privilege Escalation

A local attacker can exploit multiple vulnerabilities in BusyBox to execute arbitrary code or gain elevated privileges on Linux systems.

busybox privilege-escalation execution linux
2r 2t
critical advisory

BusyBox Vulnerability Allows Remote Code Execution or Denial-of-Service

A vulnerability in BusyBox allows a remote attacker on an adjacent network to execute arbitrary code or cause a denial-of-service condition.

BusyBox rce dos linux
2r 2t
critical advisory

BusyBox DHCPv6 Client Heap Buffer Overflow Vulnerability (CVE-2026-29004)

A heap buffer overflow vulnerability in BusyBox's DHCPv6 client allows network-adjacent attackers to trigger memory corruption, denial of service, or arbitrary code execution via crafted DHCPv6 responses.

BusyBox heap-overflow dhcpv6 cve-2026-29004 denial-of-service
2r 2t 1c