low3.2
CVE-2025-46394
In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.
Impact
In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Busybox | Busybox | through 1.37.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugs.busybox.net/show_bug.cgi?id=16018
- https://www.busybox.net
- https://www.busybox.net/downloads/
- http://www.openwall.com/lists/oss-security/2025/04/23/5
- http://www.openwall.com/lists/oss-security/2025/04/24/3
- https://cert-portal.siemens.com/productcert/html/ssa-253495.html