CVE-2022-28391

Name of the Vulnerable Software and Affected Versions BusyBox versions prior to 1.35.0

Description The issue is related to the lack of input sanitization in the BusyBox command-line utility set, specifically affecting the netstat utility when printing DNS PTR records to a VT-compatible terminal. This could allow a remote attacker to execute arbitrary code or change the terminal's colors.

Recommendations For versions prior to 1.35.0, update to version 1.35.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of the netstat utility with DNS PTR records on VT-compatible terminals until a patch is available.