Red Hat Hardened Images/busybox

Red Hat · Package

12 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
busybox: Out-of-bounds read in volume_id_get_buffer() via an offset+length wraparoundCVE-2026-124746	Red Hat Enterprise Linux 6/busybox Red Hat Hardened Images/busybox	Red Hat	Medium	No fix reported	Not recorded
busybox: tar deferred hardlink target resolved through a deferred symlink escapes the extraction directoryCVE-2026-124745	Red Hat Hardened Images/busybox	Red Hat	Medium	No fix reported	Not recorded
busybox: Divide-by-zero and heap over-read in the volume_id HFS+ proberCVE-2026-124743	Red Hat Enterprise Linux 6/busybox Red Hat Hardened Images/busybox	Red Hat	Medium	No fix reported	Not recorded
busybox: Stack buffer overflow in udhcpc6 send_d6_renew() and send_d6_release()CVE-2026-124741	Red Hat Hardened Images/busybox	Red Hat	High	No fix reported	Not recorded
busybox: Use-after-free of requested_ipv6 in udhcpc6CVE-2026-124740	Red Hat Hardened Images/busybox	Red Hat	Medium	No fix reported	Not recorded
busybox: httpd stack buffer overflow via an "I:" rule in a subdirectory httpd.confCVE-2026-124739	Red Hat Enterprise Linux 6/busybox Red Hat Hardened Images/busybox	Red Hat	High	No fix reported	Not recorded
busybox: httpd password rule bypass for pre-compressed .gz files via Accept-Encoding: gzipCVE-2026-124738	Red Hat Hardened Images/busybox	Red Hat	Medium	No fix reported	Not recorded
busybox: Heap buffer overflow in the tftp client on fallback to the default block sizeCVE-2026-124737	Red Hat Enterprise Linux 6/busybox Red Hat Hardened Images/busybox	Red Hat	High	No fix reported	Not recorded
busybox: Heap buffer overflow in wget FTP resume when the resume offset exceeds the reported file sizeCVE-2026-124747	Red Hat Enterprise Linux 6/busybox Red Hat Hardened Images/busybox	Red Hat	High	No fix reported	Not recorded
busybox: busybox: TLS Montgomery reduction allocates bytes instead of digits, causing a pre-auth heap buffer overflowCVE-2026-88830	Red Hat Hardened Images/busybox	Red Hat	High	No fix reported	Not recorded
busybox: busybox: dpkg-deb extraction-root escape via per-ar-member deferred symlink flushCVE-2026-90954	Red Hat Hardened Images/busybox	Red Hat	High	No fix reported	Not recorded
busybox: busybox: HTTP request smuggling via pipelined requests in httpd reverse proxyCVE-2026-88829	Red Hat Hardened Images/busybox	Red Hat	Medium	No fix reported	Not recorded