CVE-2023-42364: Use After Free

A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function...

CVE-2023-42364

CVE-2023-42364 describes a use-after-free in BusyBox v1.36.1’s awk.c evaluate function that can cause a denial of service via a crafted awk pattern. The Astra Linux security bulletin reiterates the same BusyBox vulnerability. Public details specify the vulnerability and affected binary, but there...

CVE-2023-42365

CVE-2023-42365 : A use-after-free in BusyBox v1.36.1 is triggered by a crafted awk pattern in the awk.c copyvar function. This is a local vulnerability that can lead to a crash or potential code execution depending on context (per the description). The issue has been reported in public advisories...

CVE-2023-42364

A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function...

CVE-2023-42363

A use-after-free vulnerability was discovered in xasprintf function in xfuncsprintf.c:344 in BusyBox v.1.36.1...

CVE-2023-42365

A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function...

CVE-2023-42366

A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the nexttoken function at awk.c:1159...

CVE-2023-42364

A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function...

PT-2023-7296

Name of the Vulnerable Software and Affected Versions BusyBox version 1.36.1 Description The issue is related to a use-after-free vulnerability in the evaluate function of the awk.c file in the BusyBox set of UNIX utilities. This vulnerability can be exploited by attackers to cause a denial of...

PT-2023-9397

Name of the Vulnerable Software and Affected Versions BusyBox version 1.36.1 Description A use-after-free issue was found in the xasprintf function, located in xfuncs printf.c at line 344. This issue can lead to a denial of service. Recommendations For BusyBox version 1.36.1, at the moment, there...

CVE-2023-42363: Use After Free

A use-after-free vulnerability was discovered in xasprintf function in xfuncsprintf.c:344 in BusyBox v.1.36.1...

CVE-2023-42363

A use-after-free vulnerability was discovered in xasprintf function in xfuncsprintf.c:344 in BusyBox v.1.36.1...

CVE-2023-42363

A use-after-free vulnerability was discovered in xasprintf function in xfuncsprintf.c:344 in BusyBox v.1.36.1...

BusyBox Security Breach

BusyBox is a suite of applications containing several linux commands and tools by Denis Vlasenko, a Ukrainian individual developer. A security vulnerability exists in BusyBox version v.1.36.1, which stems from the presence of a post-release reuse vulnerability...

CVE-2023-42363

CVE-2023-42363 (BusyBox) is a local-use-after-free in BusyBox v1.36.1, triggered in xasprintf (xfuncs_printf.c:344). Exploitation can cause a crash/DoS as described by the connected documentation; no patch/version fix is provided in the supplied materials. The CVSS vector indicates a low attack v...

Huawei EulerOS: Security Advisory for busybox (EulerOS-SA-2023-3166)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for busybox (EulerOS-SA-2023-3201)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for busybox (EulerOS-SA-2023-3002)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for busybox (EulerOS-SA-2023-3025)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OracleVM 3.4 : busybox (OVMSA-2023-5178)

The remote OracleVM system is missing necessary patches to address security updates: - There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution...