CVE-2024-58251: busybox
CVSS: 2.5v3.1LowDeferred
AliasesALPINE-CVE-2024-58251SUSE-SU-2026:1418-1SUSE-SU-2026:22862-1SUSE-SU-2026:22936-1SUSE-SU-2026:23037-1SUSE-SU-2026:23076-1SUSE-SU-2026:2620-1SUSE-SU-2026:3150-1SUSE-SU-2026:3222-1SUSE-SU-2026:3223-1UBUNTU-CVE-2024-58251DEBIAN-CVE-2024-58251CGA-2pc4-p4g5-h72vCGA-375p-cgc2-c5mjCGA-c77h-53fp-7p9mCGA-r77w-498v-8hmjopenSUSE-SU-2026:10679-1openSUSE-SU-2026:21429-1
Published 23-04-2025Last modified 23-04-2025
Vulnerability summary
CVE-2024-58251 is a low (CVSS 2.5) vulnerability in busybox. EPSS estimates a 0.18% chance of exploitation in the next 30 days, higher than 6.9% of scored vulnerabilities.
CVSS score
2.5/10
010
Low · v3.1 (CVE.org)EPSS score
0.18%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 0 · Related 1Timeline
- 23-04-2025PublishedVulnerability first disclosed.
- 23-04-2025Last modifiedVulnerability information updated.
Description
In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv[0] containing an ANSI terminal escape sequence, leading to a denial of service (terminal locked up) when netstat is used by a victim.
CVSS metrics
5 scores · 5 sources · 1 versionLow 2.5Preferred score · CVE.org (CNA)
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:LSourcesAll 5 agree
- OSV · AlpineEcosystem advisory · calculated2.5LowCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
- OSV · UbuntuEcosystem advisory · calculated2.5LowCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
- OSV · DebianEcosystem advisory · calculated2.5LowCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
- NVDNIST2.5LowCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
EPSS trend
Probability
0.18%
Chance of exploitation in the next 30 days
Percentile
7%
Versus all other CVEs
30-day change
0.00 pp
From 0.18% on 19-09-2026
19-09-202619-10-2026
EPSS score0.18%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Suse16 products
- iproute2&distro=SUSE Linux Enterprise Micro 5.3< 5.14-150400.3.6.1
- iproute2&distro=SUSE Linux Enterprise Micro 5.4< 5.14-150400.3.6.1
- iproute2&distro=SUSE Linux Enterprise Micro 5.5< 5.14-150400.3.6.1
- iproute2&distro=SUSE Linux Enterprise Module for Basesystem 15 SP7< 6.4-150600.7.12.1
- iproute2&distro=SUSE Linux Enterprise Server LTSS Extended Security 12 SP5< 4.12-16.9.1
Chainguard2 products
- busybox< 1.37.0-r49
- busybox-full< 1.37.0-r49
Opensuse2 products
- net-tools&distro=openSUSE Leap 16.0< 2.10-160000.4.1
- net-tools&distro=openSUSE Tumbleweed< 3.14~alpha~git.20251212.7011617-1.1
Wolfi2 products
- busybox< 1.37.0-r49
- busybox-full< 1.37.0-r49
Alpine1 product
- busybox< 1.36.1-r21 | < 1.36.1-r31 | < 1.37.0-r14 | < 1.37.0-r20 | < 1.37.0-r24
Busybox1 product
- busybox≤ 1.37.0
Debian1 product
- busyboxAll versions (No fix recorded) | < 1:1.37.0-9
Ubuntu1 product
- busyboxAll versions (No fix recorded)
8 vendors · 26 products
