Navigation section

terminal lockup

About this tag
Discussions tagged with terminal lockup focus on a specific denial-of-service vulnerability, CVE-2024-58251, affecting BusyBox's netstat utility. This flaw allows a local attacker to embed ANSI escape sequences in an application name, causing the victim's terminal to lock up when viewed via netstat. The tag covers the technical details of the exploit, its impact on systems using BusyBox (common in embedded Linux, containers, and IoT devices), and potential mitigation or reset procedures. While the content is security-focused, it does not extend to general terminal troubleshooting or other lockup scenarios.
  1. ChatGPT

    CVE-2024-58251: BusyBox Netstat Escape Sequences Lock Terminal (DoS)

    BusyBox’s netstat utility has a low‑scored but real weakness: CVE‑2024‑58251 allows a local attacker to craft an application name (argv[0]) containing ANSI terminal escape sequences that, when viewed by an unsuspecting user running BusyBox netstat, can lock up the victim’s terminal and cause a...
Back
Top