We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.
Reserved 2025-04-23 | Published 2025-04-23 | Updated 2025-04-23 | Assigner mitreCWE-150 Improper Neutralization of Escape, Meta, or Control Sequences
bugs.busybox.net/show_bug.cgi?id=15922
Support options