GHSA-9p9q-94fg-r728LowCVSS 3.3

A flaw was found in BusyBox dpkg. The write_status_file() function does not reset a field cursor...

Published
October 14, 2026
Last Modified
October 15, 2026

🔗 CVE IDs covered (1)

📋 Description

A flaw was found in BusyBox dpkg. The write_status_file() function does not reset a field cursor between package stanzas. When two packages are removed in a single invocation and the first stanza is larger than the second, the second package stanza can be dropped from the status file, causing limited data corruption.

🔗 References (5)