1. CVE-Search
  2. CVE-2021-42382
ID CVE-2021-42382
Summary A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function
References
Vulnerable Configurations
  • cpe:2.3:a:busybox:busybox:1.26.0:*:*:*:*:*:*:*
    cpe:2.3:a:busybox:busybox:1.26.0:*:*:*:*:*:*:*
  • cpe:2.3:a:busybox:busybox:1.26.1:*:*:*:*:*:*:*
    cpe:2.3:a:busybox:busybox:1.26.1:*:*:*:*:*:*:*
  • cpe:2.3:a:busybox:busybox:1.26.2:*:*:*:*:*:*:*
    cpe:2.3:a:busybox:busybox:1.26.2:*:*:*:*:*:*:*
  • cpe:2.3:a:busybox:busybox:1.27.0:*:*:*:*:*:*:*
    cpe:2.3:a:busybox:busybox:1.27.0:*:*:*:*:*:*:*
  • cpe:2.3:a:busybox:busybox:1.27.1:*:*:*:*:*:*:*
    cpe:2.3:a:busybox:busybox:1.27.1:*:*:*:*:*:*:*
  • cpe:2.3:a:busybox:busybox:1.27.2:*:*:*:*:*:*:*
    cpe:2.3:a:busybox:busybox:1.27.2:*:*:*:*:*:*:*
  • cpe:2.3:a:busybox:busybox:1.28.0:*:*:*:*:*:*:*
    cpe:2.3:a:busybox:busybox:1.28.0:*:*:*:*:*:*:*
  • cpe:2.3:a:busybox:busybox:1.28.1:*:*:*:*:*:*:*
    cpe:2.3:a:busybox:busybox:1.28.1:*:*:*:*:*:*:*
  • cpe:2.3:a:busybox:busybox:1.28.2:*:*:*:*:*:*:*
    cpe:2.3:a:busybox:busybox:1.28.2:*:*:*:*:*:*:*
  • cpe:2.3:a:busybox:busybox:1.28.3:*:*:*:*:*:*:*
    cpe:2.3:a:busybox:busybox:1.28.3:*:*:*:*:*:*:*
  • cpe:2.3:a:busybox:busybox:1.28.4:*:*:*:*:*:*:*
    cpe:2.3:a:busybox:busybox:1.28.4:*:*:*:*:*:*:*
  • cpe:2.3:a:busybox:busybox:1.29.0:*:*:*:*:*:*:*
    cpe:2.3:a:busybox:busybox:1.29.0:*:*:*:*:*:*:*
  • cpe:2.3:a:busybox:busybox:1.29.1:*:*:*:*:*:*:*
    cpe:2.3:a:busybox:busybox:1.29.1:*:*:*:*:*:*:*
  • cpe:2.3:a:busybox:busybox:1.29.2:*:*:*:*:*:*:*
    cpe:2.3:a:busybox:busybox:1.29.2:*:*:*:*:*:*:*
  • cpe:2.3:a:busybox:busybox:1.29.3:*:*:*:*:*:*:*
    cpe:2.3:a:busybox:busybox:1.29.3:*:*:*:*:*:*:*
  • cpe:2.3:a:busybox:busybox:1.30.0:*:*:*:*:*:*:*
    cpe:2.3:a:busybox:busybox:1.30.0:*:*:*:*:*:*:*
  • cpe:2.3:a:busybox:busybox:1.30.1:*:*:*:*:*:*:*
    cpe:2.3:a:busybox:busybox:1.30.1:*:*:*:*:*:*:*
  • cpe:2.3:a:busybox:busybox:1.31.0:*:*:*:*:*:*:*
    cpe:2.3:a:busybox:busybox:1.31.0:*:*:*:*:*:*:*
  • cpe:2.3:a:busybox:busybox:1.31.1:*:*:*:*:*:*:*
    cpe:2.3:a:busybox:busybox:1.31.1:*:*:*:*:*:*:*
  • cpe:2.3:a:busybox:busybox:1.32.0:*:*:*:*:*:*:*
    cpe:2.3:a:busybox:busybox:1.32.0:*:*:*:*:*:*:*
  • cpe:2.3:a:busybox:busybox:1.32.1:*:*:*:*:*:*:*
    cpe:2.3:a:busybox:busybox:1.32.1:*:*:*:*:*:*:*
  • cpe:2.3:a:busybox:busybox:1.33.0:*:*:*:*:*:*:*
    cpe:2.3:a:busybox:busybox:1.33.0:*:*:*:*:*:*:*
  • cpe:2.3:a:busybox:busybox:1.33.1:*:*:*:*:*:*:*
    cpe:2.3:a:busybox:busybox:1.33.1:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
    cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
    cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
CVSS
Base: 6.5 (as of 25-04-2023 - 22:15)
Impact:
Exploitability:
CWE CWE-416
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW SINGLE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:S/C:P/I:P/A:P
Last major update 25-04-2023 - 22:15
Published 15-11-2021 - 21:15
Last modified 25-04-2023 - 22:15
Back to Top