← All credits

Red Hat would like to thank Shubham Raj (Causal Security) for reporting this issue.

6 vulnerability records and advisories credit this contributor.

Busybox: busybox: passwd/group parser writes heap pointers out of bounds due to stale tokenize() endpoint

Busybox: busybox: dpkg read_package_field() steps past nul terminator, causing out-of-bounds read on malformed .deb packages

Busybox: busybox: httpd misidentifies yescrypt password hashes as plaintext, inverting authentication

Busybox: busybox: httpd silently fails open when ip deny rules contain invalid cidr prefix lengths

Busybox: busybox: romfs volume id parsing performs unbounded memcpy into fixed-size label buffer, causing heap overflow

Busybox: busybox: tls montgomery reduction allocates bytes instead of digits, causing a pre-auth heap buffer overflow