Lucene search
K

1803 matches found

OSV
OSV
added 2021/11/15 9:15 p.m.1 views

DEBIAN-CVE-2021-42377

An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafted shell command, due to the shell mishandling the &&& string. This may be used for remote code execution under rare conditions of filtered command input...

9.8CVSS7.8AI score0.03379EPSS
Exploits0References1
OSV
OSV
added 2021/11/15 9:15 p.m.35 views

CVE-2021-42375

An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input...

5.5CVSS6.7AI score
Exploits0References5
OSV
OSV
added 2021/11/15 9:15 p.m.24 views

CVE-2021-42377

An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafted shell command, due to the shell mishandling the &&& string. This may be used for remote code execution under rare conditions of filtered command input...

9.8CVSS7.8AI score
Exploits0References5
OSV
OSV
added 2021/11/15 9:15 p.m.1 views

ALPINE-CVE-2021-42375

An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input...

5.5CVSS6.8AI score0.00378EPSS
Exploits0References1
OSV
OSV
added 2021/11/15 9:15 p.m.33 views

CVE-2021-42376

A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted shell command, due to missing validation after a \x03 delimiter character. This may be used for DoS under very rare conditions of filtered command input...

5.5CVSS6.7AI score
Exploits0References5
UbuntuCve
UbuntuCve
added 2021/11/15 9:15 p.m.46 views

CVE-2021-42376

A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted shell command, due to missing validation after a \x03 delimiter character. This may be used for DoS under very rare conditions of filtered command input...

5.5CVSS6.9AI score0.00399EPSS
Exploits0References2
Prion
Prion
added 2021/11/15 9:15 p.m.32 views

Null pointer dereference

A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted shell command, due to missing validation after a \x03 delimiter character. This may be used for DoS under very rare conditions of filtered command input...

1.9CVSS5.9AI score0.00399EPSS
Exploits0References5Affected Software2
Prion
Prion
added 2021/11/15 9:15 p.m.30 views

Command injection

An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input...

1.9CVSS7.1AI score0.00378EPSS
Exploits0References5Affected Software2
UbuntuCve
UbuntuCve
added 2021/11/15 9:15 p.m.53 views

CVE-2021-42377

An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafted shell command, due to the shell mishandling the &&& string. This may be used for remote code execution under rare conditions of filtered command input...

9.8CVSS7.5AI score0.03379EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2021/11/15 12:0 a.m.7 views

CVE-2021-42375

An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input...

7.1AI score0.00378EPSS
Exploits0References5
CVE
CVE
added 2021/11/15 12:0 a.m.174 views

CVE-2021-42377

CVE-2021-42377 (BusyBox) is one of multiple vulnerabilities affecting BusyBox, specifically in the hush applet. The issue is an attacker-controlled pointer free that can cause denial of service and, under rare crafted inputs, may enable remote code execution. The vulnerability is categorized unde...

9.8CVSS9.5AI score0.03379EPSS
Exploits0References5Affected Software1
Debian CVE
Debian CVE
added 2021/11/15 12:0 a.m.48 views

CVE-2021-42377

An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafted shell command, due to the shell mishandling the &&& string. This may be used for remote code execution under rare conditions of filtered command input...

9.8CVSS7.1AI score0.03379EPSS
Exploits0
CVE
CVE
added 2021/11/15 12:0 a.m.231 views

CVE-2021-42376

CVE-2021-42376 is a BusyBox vulnerability affecting the hush applet where a NULL pointer dereference can cause denial of service when processing a crafted command due to missing validation after a delimiter. Public disclosures and vendor advisories across multiple distributions (Debian, Alpine, F...

5.5CVSS6.9AI score0.00399EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2021/11/15 12:0 a.m.28 views

CVE-2021-42376

A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted shell command, due to missing validation after a \x03 delimiter character. This may be used for DoS under very rare conditions of filtered command input...

7.3AI score0.00399EPSS
Exploits0References5
Cvelist
Cvelist
added 2021/11/15 12:0 a.m.42 views

CVE-2021-42375

An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input...

7.4AI score0.00378EPSS
Exploits0References5
AlpineLinux
AlpineLinux
added 2021/11/15 12:0 a.m.44 views

CVE-2021-42377

An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafted shell command, due to the shell mishandling the &&& string. This may be used for remote code execution under rare conditions of filtered command input...

9.8CVSS9.8AI score0.03379EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2021/11/15 12:0 a.m.50 views

CVE-2021-42375

An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input...

5.5CVSS7.3AI score0.00378EPSS
Exploits0
Veracode
Veracode
added 2021/11/12 8:44 a.m.57 views

Denial Of Service (DoS)

busybox is vulnerable to denial of service. The vulnerability exists due to the incorrect handling of a special element in ash when processing a crafted shell command, allowing an attacker to cause an application crash...

5.5CVSS3.2AI score0.00378EPSS
Exploits0References9Affected Software1
CNVD
CNVD
added 2021/11/12 12:0 a.m.26 views

BusyBox code issue vulnerability (CNVD-2021-89688)

BusyBox is a suite of applications containing several linux commands and tools from the Ukrainian personal developer Denis Vlasenko. A code issue vulnerability exists in the Busybox hush applet, which stems from the fact that dereferencing the NULL pointer in Busybox's hush applet will result in ...

5.5CVSS2AI score0.00399EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2021/11/12 12:0 a.m.15 views

Huawei EulerOS: Security Advisory for sssd (EulerOS-SA-2021-2675)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS8.8AI score0.02524EPSS
Exploits0References2
Rows per page
Query Builder