What’s Vulnerable › Vulnerabilities

CVE-2022-28391

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-04-03 · updated 2026-06-17
• Weakness: CWE-88

Description

BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.

Affected products

• busybox: through 1.35.0

References

• https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch
• https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch
• https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661
• https://git.alpinelinux.org/aports/plain/main/busybox/0001-libbb-sockaddr2str-ensure-only-printable-characters-.patch
• https://git.alpinelinux.org/aports/plain/main/busybox/0002-nslookup-sanitize-all-printed-strings-with-printable.patch
• https://gitlab.alpinelinux.org/alpine/aports/-/issues/13661

Get alerted when CVE-2022-28391 or the next vulnerability affects your stack