VDB

GCVE-110-MAGEIA-2022-135

GCVE-110-MAGEIA-2022-135
Advisory Published
Vulnetix · Advisory published April 9, 2022
BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors. (CVE-2022-28391)

Affected Products

VendorProductVersionsPlatforms
Mageiabusybox0 (affected), 1.34.1-1.1.mga8 (unaffected), 0 (affected), 1.34.1-1.1.mga8 (unaffected)
Mageiafail2ban0 (affected), 1.0.1-1.mga8 (unaffected)

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›