VDB
CVE-2023-39810
CVE-2023-39810
PUBLISHED
BusyBox ist ein Computerprogramm, das verschiedene Standard-Unix-Dienstprogramme in einem einzelnen Programm vereint.
EPSS 0.77% · 54.9th percentile
Risk Scores
EPSS Score
0.77%
54.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Open Source | Open Source BusyBox 1.33.2 | |
| Open Source | Open Source BusyBox cpio <2.6-6 | |
| Open Source | Open Source BusyBox 1.30.1 | |
| SUSE | SUSE openSUSE |
Timeline
- Aug 27, 2023 CVE Published
- Aug 29, 2023 EPSS Score
- Oct 2, 2023 EPSS Score
- Nov 5, 2023 EPSS Score
- Dec 9, 2023 EPSS Score
- Jan 11, 2024 EPSS Score
- Feb 14, 2024 EPSS Score
- Mar 19, 2024 EPSS Score
- Apr 22, 2024 EPSS Score
- May 26, 2024 EPSS Score
- Jun 29, 2024 EPSS Score
- Aug 2, 2024 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2189.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2189 advisory
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XISYFOS7SNXYN3SXCKNAVGGMWK36JYIJ/ advisory
- https://www.pentagrid.ch/en/blog/busybox-cpio-directory-traversal-vulnerability/ advisory