ID CVE-2021-42383
Summary A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function
References
Vulnerable Configurations
  • cpe:2.3:a:busybox:busybox:1.33.1:*:*:*:*:*:*:*
    cpe:2.3:a:busybox:busybox:1.33.1:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
    cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
    cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
CVSS
Base: 6.5 (as of 04-01-2022 - 17:16)
Impact:
Exploitability:
CWE CWE-416
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW SINGLE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:S/C:P/I:P/A:P
Last major update 04-01-2022 - 17:16
Published 15-11-2021 - 21:15
Last modified 04-01-2022 - 17:16
Back to Top