7.5Alta

CVE-2026-124739Busybox: httpd stack buffer overflow via an "i:" rule in a subdirectory httpd.conf

Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Hardened Images Publicada: (hace 3 días)

Descripción

A flaw was found in BusyBox. When the httpd web server processes subdirectory configuration files, an overly long index page name can trigger a stack-based buffer overflow. An attacker with permissions to write to a subdirectory configuration file could exploit this vulnerability to execute arbitrary code with elevated privileges or cause a denial of service (DoS) by crashing the server process.

Debilidad (CWE): CWE-787

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
Red Hat Red Hat Enterprise Linux 6 all versions
Red Hat Red Hat Hardened Images all versions

Referencias y parches