GHSA-cfm6-7rfg-w924HighCVSS 7.5

A flaw was found in BusyBox. When the httpd web server processes subdirectory configuration files...

Published
November 11, 2026
Last Modified
November 11, 2026

🔗 CVE IDs covered (1)

📋 Description

A flaw was found in BusyBox. When the httpd web server processes subdirectory configuration files, an overly long index page name can trigger a stack-based buffer overflow. An attacker with permissions to write to a subdirectory configuration file could exploit this vulnerability to execute arbitrary code with elevated privileges or cause a denial of service (DoS) by crashing the server process.

🔗 References (4)