CVE-2021-42374

🗓️ 15 Nov 2021 00:00:00Reported by JFROGType

An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service

Reporter	Title	Published	Views	Family All 95
AlpineLinux	CVE-2021-42374	15 Nov 202100:00	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в busybox	20 May 202605:53	–	astralinux
Information Security Automation	Scanvus now supports Vulners and Vulns.io VM Linux vulnerability detection APIs	30 Dec 202218:03	–	avleonov
CBLMariner	CVE-2021-42374 affecting package busybox for versions less than 1.35.1-1	21 Jun 202409:32	–	cbl_mariner
CBLMariner	CVE-2021-42374 affecting package busybox 1.32.0-2	10 Jan 202203:59	–	cbl_mariner
CBLMariner	CVE-2021-42374 affecting package busybox for versions less than 1.35.0-1	9 Apr 202206:51	–	cbl_mariner
Cloud Foundry	USN-5179-1: BusyBox vulnerabilities \| Cloud Foundry	20 Jan 202200:00	–	cloudfoundry
Circl	CVE-2021-42374	17 Nov 202116:30	–	circl
CNNVD	BusyBox 缓冲区错误漏洞	15 Nov 202100:00	–	cnnvd
CNVD	BusyBox buffer overflow vulnerability	12 Nov 202100:00	–	cnvd

NVD

Node

busybox busyboxRange1.27.0–1.33.1

Node

fedoraproject fedoraMatch33

fedoraproject fedoraMatch34

Node

netapp cloud_backupMatch-

netapp hci_management_nodeMatch-

netapp solidfireMatch-

Node

netapp h300s_firmwareMatch-

AND

netapp h300sMatch-

Node

netapp h500s_firmwareMatch-

AND

netapp h500sMatch-

Node

netapp h700s_firmwareMatch-

AND

netapp h700sMatch-

Node

netapp h300e_firmwareMatch-

AND

netapp h300eMatch-

Node

netapp h500e_firmwareMatch-

AND

netapp h500eMatch-

Node

netapp h700e_firmwareMatch-

AND

netapp h700eMatch-

Node

netapp h410s_firmwareMatch-

AND

netapp h410sMatch-

[
  {
    "vendor": "busybox",
    "product": "busybox",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "1.34.0",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS/
jfrog	www.jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV/
security	www.security.netapp.com/advisory/ntap-20211223-0002/
claroty	www.claroty.com/team82/research/unboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog
lists	www.lists.debian.org/debian-lts-announce/2025/01/msg00012.html

03 Nov 2025 21:15Current

5.9Medium risk

Vulners AI Score5.9

CVSS 23.3

CVSS 3.15.3

EPSS0.00064

SSVC

CWE-125