mirror of
https://git.yoctoproject.org/poky
synced 2026-03-17 12:49:40 +01:00
BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors. https://nvd.nist.gov/vuln/detail/CVE-2022-28391 (From OE-Core rev: 3e17df4cd17c132dc7732ebd3d1c80c81c85bcc4) Signed-off-by: Steve Sakoman <steve@sakoman.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>