Lucene search
K

782 matches found

OSV
OSV
added 2021/12/03 11:3 a.m.2 views

OESA-2021-1449 busybox security update

BusyBox combines tiny versions of many common UNIX utilities into a single small executable. It provides replacements for most of the utilities you usually find in GNU fileutils, shellutils, etc. It provides a fairly complete environment for any small or embedded system. Security Fixes: A...

7.2CVSS7.6AI score0.00491EPSS
Exploits0References9
Mageia
Mageia
added 2021/12/02 4:49 p.m.111 views

Updated busybox packages fix security vulnerability

A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted shell command, due to missing validation after a \x03 delimiter character. This may be used for DoS under very rare conditions of filtered command input. CVE-2021-42376 An attacker-controlled...

9.8CVSS2.7AI score0.02855EPSS
Exploits0References2
OSV
OSV
added 2021/11/26 11:3 a.m.2 views

OESA-2021-1447 busybox security update

BusyBox combines tiny versions of many common UNIX utilities into a single small executable. It provides replacements for most of the utilities you usually find in GNU fileutils, shellutils, etc. It provides a fairly complete environment for any small or embedded system. Security Fixes: A...

7.2CVSS7.7AI score0.00293EPSS
Exploits0References3
Microsoft CVE
Microsoft CVE
added 2021/11/18 8:0 a.m.2 views

A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function

...

7.2CVSS8.3AI score0.00321EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2021/11/18 8:0 a.m.2 views

A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function

...

7.2CVSS8.3AI score0.00321EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2021/11/18 8:0 a.m.2 views

A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function

...

7.2CVSS8.3AI score0.00236EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2021/11/18 8:0 a.m.5 views

A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function

...

7.2CVSS8.3AI score0.00491EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2021/11/18 8:0 a.m.3 views

A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function

...

7.2CVSS8.3AI score0.00293EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2021/11/18 8:0 a.m.2 views

A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function

...

7.2CVSS8.3AI score0.00236EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2021/11/18 8:0 a.m.3 views

A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function

...

7.2CVSS8.3AI score0.00293EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2021/11/16 7:44 p.m.31 views

CVE-2021-42384

A flaw was found in BusyBox, where it did not properly sanitize while processing a crafted awk pattern in the handlespecial function, leading to possible code execution. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

7.2CVSS8.2AI score0.00236EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2021/11/16 7:44 p.m.33 views

CVE-2021-42383

A flaw was found in BusyBox, where it did not properly sanitize while processing a crafted awk pattern in the evaluate function, leading to possible code execution. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

7.2CVSS8.2AI score0.00288EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2021/11/16 7:44 p.m.26 views

CVE-2021-42385

A flaw was found in BusyBox, where it did not properly sanitize while processing a crafted awk pattern in the evaluate function, leading to possible code execution. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

7.2CVSS8.2AI score0.00293EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2021/11/16 7:17 p.m.39 views

CVE-2021-42378

A flaw was found in BusyBox, where it did not properly sanitize while processing a crafted awk pattern, leading to possible code execution. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

7.2CVSS8.2AI score0.00236EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2021/11/16 7:17 p.m.30 views

CVE-2021-42379

A flaw was found in BusyBox, where it did not properly sanitize while processing a crafted awk pattern in the nextinputfile function, leading to possible code execution. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

7.2CVSS8.2AI score0.00236EPSS
Exploits0References4
NVD
NVD
added 2021/11/15 9:15 p.m.21 views

CVE-2021-42384

A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handlespecial function...

7.2CVSS0.00236EPSS
Exploits0References6
OSV
OSV
added 2021/11/15 9:15 p.m.82 views

CVE-2021-42385

A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function...

7.2CVSS7.3AI score
Exploits0References6
OSV
OSV
added 2021/11/15 9:15 p.m.48 views

CVE-2021-42386

A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function...

7.2CVSS7.3AI score
Exploits0References6
NVD
NVD
added 2021/11/15 9:15 p.m.16 views

CVE-2021-42385

A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function...

7.2CVSS0.00293EPSS
Exploits0References6
OSV
OSV
added 2021/11/15 9:15 p.m.1 views

ALPINE-CVE-2021-42383

A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function...

7.2CVSS7.5AI score0.00288EPSS
Exploits0References1
Rows per page
Query Builder