Threats tagged 'ghsa-gjcv-9jxm-vqjv'

A vulnerability in BusyBox's volume identification component for HFS+ filesystems allows improper validation of header values. An attacker with local access to attach a storage device or supply a crafted filesystem image can cause an application crash, resulting in a denial of service (DoS) that prevents device resolution. This issue is rated as moderate severity by Red Hat, primarily causing local DoS with no confidentiality or integrity impact. BusyBox is typically used in rescue or initramfs environments rather than as a default core utility in Red Hat Enterprise Linux, limiting exposure.