Description (CNA)
In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| BusyBox / BusyBox | affected 0 through 1.37.0 |
CWE
CWE-150
References
- https://www.busybox.net/downloads/
- https://www.busybox.net
- https://bugs.busybox.net/show_bug.cgi?id=15922
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.