CVE-2024-58251 is a vulnerability in BusyBox's netstat utility that allows a local attacker to craft an application name containing ANSI terminal escape sequences. When a user runs BusyBox netstat and views the output, these sequences can lock up the victim's terminal, causing a denial-of-service condition until the terminal is reset. BusyBox is a compact suite of Unix utilities commonly used in embedded Linux systems, initramfs, containers, and IoT devices. This issue is considered low severity but can be disruptive in environments where BusyBox netstat is used. Discussions on WindowsForum cover the technical details, affected versions, and potential mitigations for this vulnerability.
-
BusyBox’s netstat utility has a low‑scored but real weakness: CVE‑2024‑58251 allows a local attacker to craft an application name (argv[0]) containing ANSI terminal escape sequences that, when viewed by an unsuspecting user running BusyBox netstat, can lock up the victim’s terminal and cause a...