CVE-2024-58251

LowCVSS 2.5/10Last modified Jun 17, 2026

Description

In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.

Metrics

CVSS 3.1 2.5/10CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-150

Affected software

No affected versions have been published.

Timeline

Published: Apr 23, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-582525.5Vulnerability of insufficient information protection in the media library module Impact: Successful exploitation of this vulnerability may a CVE-2024-582532.9In the obfstr crate before 0.4.4 for Rust, the obfstr! argument type is not restricted to string slices, leading to invalid UTF-8 conversion CVE-2024-582556.7EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary command execution.CVE-2024-582567.8EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary command execution.CVE-2024-582576.7EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary command execution.CVE-2024-582587.2SugarCRM before 13.0.4 and 14.x before 14.0.1 allows SSRF in the API module because a limited type of code injection can occur.CVE-2024-582598.2A vulnerability has been identified within Rancher Manager in which it did not enforce request body size limits on certain public (unauthe CVE-2024-58269.8In the latest version of vanna-ai/vanna, the `vanna.ask` function is vulnerable to remote code execution due to prompt injection. The root c CVE-2024-582607.6A vulnerability has been identified within Rancher Manager where a missing server-side validation on the `.username` field in Rancher can al CVE-2024-582617.5The sequoia-openpgp crate 1.13.0 before 1.21.0 for Rust allows an infinite loop of "Reading a cert: Invalid operation: Not a Key packet" mes CVE-2024-582625.1The curve25519-dalek crate before 4.1.3 for Rust has a constant-time operation on elliptic curve scalars that is removed by LLVM.CVE-2024-582635.3The cosmwasm-std crate before 2.0.2 for Rust allows integer overflows that cause incorrect contract calculations.