busybox

Direct Vulnerabilities

Known vulnerabilities in the busybox package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
H Out-of-bounds Write	*
L Integer Overflow or Wraparound	*
L Improper Handling of Syntactically Invalid Structure	*
L Improper Handling of Syntactically Invalid Structure	*
L Integer Overflow or Wraparound	*
L Access of Memory Location After End of Buffer	*
L Access of Memory Location After End of Buffer	*
L Out-of-bounds Write	*
M Improper Input Validation	*
M Resource Management Errors	*
M Heap-based Buffer Overflow	*
M Integer Overflow or Wraparound	*
M Directory Traversal	*
M Directory Traversal	*
M Link Following	<1:1.37.0-9.4.hum1
L Out-of-bounds Read	<0:1.37.0-9.4.hum1
M HTTP Request Smuggling	*
H Link Following	*
M Integer Underflow	*
M Link Following	<1:1.37.0-9.4.hum1
L Out-of-bounds Read	<0:1.37.0-9.2.hum1
M Out-of-bounds Read	<0:1.37.0-9.1.hum1
M Authentication Bypass by Primary Weakness	<0:1.37.0-9.1.hum1
M Not Failing Securely ('Failing Open')	<0:1.37.0-9.1.hum1
H Out-of-bounds Write	<0:1.37.0-9.1.hum1
M Out-of-bounds Write	<0:1.37.0-9.1.hum1
H Buffer Overflow	<1:1.37.0-8.1.hum1
M Use After Free	<1:1.37.0-8.1.hum1
M Buffer Overflow	<1:1.37.0-8.2.hum1
M Buffer Overflow	<1:1.37.0-8.2.hum1
H Incorrect Calculation of Buffer Size	<1:1.37.0-7.3.hum1
L CRLF Injection	<0:1.37.0-7.1.hum1
H External Control of File Name or Path	<0:1.37.0-7.2.hum1
H External Control of File Name or Path	<0:1.37.0-7.2.hum1