DeutschShown in its original language — a full translation is planned for a future version.
BusyBox (wget): Schwachstelle ermöglicht Umgehung von Sicherheitsvorkehrungen
view advisory published 2025-11-10
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in BusyBox (wget) ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-60876US | — | Exploit | ||
BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-cont… | ||||
02
references
External citations — patches, advisories, analysis.
- PoC vom 2025-11-10external
- GitHub Security Advisory GHSA-48hw-cv6f-mcpj vom 2025-11-10external
- openSUSE Security Update OPENSUSE-SU-2025:15834-1 vom 2025-12-21external
- SUSE Security Update SUSE-SU-2026:0236-1 vom 2026-01-22external
- SUSE Security Update SUSE-SU-2026:0235-1 vom 2026-01-22external
- SUSE Security Update SUSE-SU-2026:20134-1 vom 2026-01-28external
- SUSE Security Update SUSE-SU-2026:0872-1 vom 2026-03-12external
- WID-SEC-W-2025-2537 - CSAF Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan