Threats tagged 'ghsa-jj7c-h3wm-vjfw'

A heap overflow vulnerability exists in the ifsbreakup() function within shell/ash.c of Busybox version 1.38.0. This flaw allows an attacker to cause a Denial of Service (DoS) by supplying crafted input to the affected function. The vulnerability is identified as CWE-122 (Heap-based Buffer Overflow) and CWE-125 (Out-of-bounds Read). No patch or remediation information is currently provided.