← All credits

Red Hat would like to thank Shubham Raj (Causal Security) for reporting this issue.

20 vulnerability records and advisories credit this contributor.

Busybox: busybox: dpkg stale field_start pointer causes out-of-bounds read and status file corruption

Busybox: busybox: http request smuggling via pipelined requests in httpd reverse proxy

Busybox: busybox: non-root mount option filter bypass allows clearing fstab security restrictions

Busybox: busybox: httpd user existence oracle in non-default shadow-disabled builds

Busybox: busybox: passwd/group parser writes heap pointers out of bounds due to stale tokenize() endpoint

Busybox: busybox: dpkg read_package_field() steps past nul terminator, causing out-of-bounds read on malformed .deb packages

Busybox: busybox: httpd misidentifies yescrypt password hashes as plaintext, inverting authentication

Busybox: busybox: httpd silently fails open when ip deny rules contain invalid cidr prefix lengths

Busybox: busybox: romfs volume id parsing performs unbounded memcpy into fixed-size label buffer, causing heap overflow

Busybox: busybox: tls montgomery reduction allocates bytes instead of digits, causing a pre-auth heap buffer overflow