{"vulnerability": "CVE-2026-88833", "sightings": [{"uuid": "5d8e3751-d96a-47a3-afa5-c16989d05a8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88833", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3my2msvoah52m", "content": "MEDIUM severity CVE just published in BusyBox:\n\nCVE-2026-88833. A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP header\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-88833", "creation_timestamp": "2026-10-17T08:01:55.844210Z"}, {"uuid": "af36e39a-8e70-4a6f-b453-127f9dbc4ead", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88833", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5a2bpx4bmx72a", "content": "CVE-2026-88833 - Busybox: busybox: udhcpc integer underflow in dhcp packet length calculation causes denial of service\nCVE ID : CVE-2026-88833\n \n Published : Oct. 13, 2026, 4:56 p.m. | 28\u00a0minutes ago\n \n Description : A flaw was found in BusyBox's udhcpc DHCP client. When proce...", "creation_timestamp": "2026-10-13T18:09:13.855739Z"}, {"uuid": "163a72b3-3a81-423b-bfda-68bef76bf970", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88833", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117434773040958128", "content": "CVE-2026-88833 Busybox: busybox: udhcpc integer underflow in dhcp packet length calculation causes denial of service A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP header without re-validating the minimum size. This leads to an integer underflow when subtracting header sizes, causing a subsequent memory copy with a massively oversized length. An attacker on the same network segment can send a specially crafted packet to crash the DHCP client, resulting in denial of service and loss of network connectivity.\nhttps://www.cve.org/CVERecord?id=CVE-2026-88833https://access.redhat.com/security/cve/CVE-2026-88833https://bugzilla.redhat.com/show_bug.cgi?id=2531347#RedHat #RedHatHardenedImages#CVE_2026_88833#bot", "creation_timestamp": "2026-10-13T17:27:11.045373Z"}]}