Vulnerability Description
In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.
CVSS Score
LOW
Related Weaknesses (CWE)
References
- https://bugs.busybox.net/show_bug.cgi?id=15922
- https://www.busybox.net
- https://www.busybox.net/downloads/
- http://www.openwall.com/lists/oss-security/2025/04/23/6
FAQ
What is CVE-2024-58251?
CVE-2024-58251 is a vulnerability with a CVSS score of 2.5 (LOW). In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) whe...
How severe is CVE-2024-58251?
CVE-2024-58251 has been rated LOW with a CVSS base score of 2.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-58251?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.