logo

14 BusyBox Vulnerabilities: Claroty & JFrog's Findings | Team82

ID: fc095f5d-e9b3-5d7f-82bb-448f3f405faf

STIX ID: report--fc095f5d-e9b3-5d7f-82bb-448f3f405faf

Feed Name: Claroty Team82

Threat Score
60/100

Date Published: 2023-09-12

Date Updated: 2026-04-17

Author: Vera Mens; Uri Katz; Sharon Brizinov; Tal Keren

...
...

### Executive Summary Claroty's Team82 and JFrog analyzed BusyBox and discovered 14 vulnerabilities affecting common BusyBox applets (DoS, information leaks, and some use-after-free issues with potential for RCE); all issues were privately disclosed and fixed in BusyBox 1.34.0, and the researchers published fuzzing harnesses, PoCs (including a ZIP-based weaponization example), and mitigation guidance.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.