CVE-2024-58251
Fixed in a distro release EPSS <1%CVSS 2.5
In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.
Products: busybox
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.19 | busybox | 1.36.1-r21 |
| Alpine 3.20 | busybox | 1.36.1-r31 |
| Alpine 3.21 | busybox | 1.37.0-r14 |
| Alpine 3.22 | busybox | 1.37.0-r20 |
| Alpine 3.23 | busybox | 1.37.0-r24 |
| Alpine 3.24 | busybox | 1.37.0-r24 |
| Chainguard | busybox | 1.37.0-r49 |
| Chainguard | busybox-full | 1.37.0-r49 |
| Debian 12 | busybox | no fix |
| Debian 13 | busybox | no fix |
| Debian 14 | busybox | 1:1.37.0-9 |
| SUSE Linux Enterprise Micro 5.3 | iproute2 | 5.14-150400.3.6.1 |
| SUSE Linux Enterprise Micro 5.3 | net-tools | 2.0+git20170221.479bb4a-150000.5.18.1 |
| SUSE Linux Enterprise Micro 5.4 | iproute2 | 5.14-150400.3.6.1 |
| SUSE Linux Enterprise Micro 5.4 | net-tools | 2.0+git20170221.479bb4a-150000.5.18.1 |
| SUSE Linux Enterprise Micro 5.5 | iproute2 | 5.14-150400.3.6.1 |
| SUSE Linux Enterprise Micro 5.5 | net-tools | 2.0+git20170221.479bb4a-150000.5.18.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | iproute2 | 6.4-150600.7.12.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | net-tools | 2.0+git20170221.479bb4a-150000.5.18.1 |
| SUSE Linux Enterprise Module for Legacy 15 SP7 | net-tools | 2.0+git20170221.479bb4a-150000.5.18.1 |
| SUSE Linux Enterprise Server 16.0 | net-tools | 2.10-160000.4.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | iproute2 | 4.12-16.9.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | net-tools | 1.60-765.20.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | net-tools | 2.10-160000.4.1 |
| SUSE Linux Micro 6.0 | net-tools | 2.10-5.1 |
| SUSE Linux Micro 6.1 | net-tools | 2.10-slfo.1.1_3.1 |
| SUSE Linux Micro 6.2 | net-tools | 2.10-160000.4.1 |
| Ubuntu 20.04 LTS | busybox | no fix |
| Ubuntu 22.04 LTS | busybox | no fix |
| Ubuntu 24.04 LTS | busybox | no fix |
| Ubuntu 25.10 | busybox | no fix |
| Ubuntu 26.04 LTS | busybox | no fix |
| Ubuntu 26.10 | busybox | no fix |
| Ubuntu Pro 14.04 LTS | busybox | no fix |
| Ubuntu Pro 16.04 LTS | busybox | no fix |
| Ubuntu Pro 18.04 LTS | busybox | no fix |
| Wolfi | busybox | 1.37.0-r49 |
| Wolfi | busybox-full | 1.37.0-r49 |
| openSUSE Leap 16.0 | net-tools | 2.10-160000.4.1 |
| openSUSE Tumbleweed | net-tools | 3.14~alpha~git.20251212.7011617-1.1 |