Skip to content
Threat Feed
Subscribe

Vendor

Busybox

4 briefs RSS
low advisory

BusyBox AWK Vulnerability Leads to Denial of Service

A stack overflow vulnerability, identified as CVE-2026-38752, exists in the evaluate() function within the AWK editor (editors/awk.c) of BusyBox commit 371fe9, which allows attackers to trigger a Denial of Service (DoS) condition by providing a specially crafted AWK script.

BusyBox denial-of-service vulnerability linux
1t 1c
high advisory

CVE-2026-38754: Busybox Heap Overflow Leads to Denial of Service

A heap overflow vulnerability (CVE-2026-38754) exists in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0. This flaw allows attackers to trigger a Denial of Service (DoS) by providing a specially crafted input, leading to application instability or unavailability.

Busybox v1.38.0 vulnerability denial-of-service heap-overflow linux
1t 3c
critical advisory

BusyBox Vulnerability Allows Remote Code Execution or Denial-of-Service

A vulnerability in BusyBox allows a remote attacker on an adjacent network to execute arbitrary code or cause a denial-of-service condition.

BusyBox rce dos linux
2r 2t
critical advisory

BusyBox DHCPv6 Client Heap Buffer Overflow Vulnerability (CVE-2026-29004)

A heap buffer overflow vulnerability in BusyBox's DHCPv6 client allows network-adjacent attackers to trigger memory corruption, denial of service, or arbitrary code execution via crafted DHCPv6 responses.

BusyBox heap-overflow dhcpv6 cve-2026-29004 denial-of-service
2r 2t 1c