Lucene search
K

23 matches found

Veracode
Veracode
added 2022/06/18 9:10 p.m.26 views

Denial Of Service (DoS)

busybox is vulnerable denial of service. The vulnerability exists due to a pointer free in Busybox's hush applet when processing a crafted shell command...

9.8CVSS9AI score0.02855EPSS
Exploits0References8Affected Software1
Veracode
Veracode
added 2022/06/18 9:9 p.m.21 views

Denial Of Service (DoS)

busybox is vulnerable denial of service. The vulnerability exists due to a NULL pointer dereference in Busybox's hush applet leads when processing a crafted shell command, due to missing validation after a \x03 delimiter character...

5.5CVSS7AI score0.00045EPSS
Exploits0References8Affected Software1
OSV
OSV
added 2021/11/26 11:3 a.m.3 views

OESA-2021-1447 busybox security update

BusyBox combines tiny versions of many common UNIX utilities into a single small executable. It provides replacements for most of the utilities you usually find in GNU fileutils, shellutils, etc. It provides a fairly complete environment for any small or embedded system. Security Fixes: A...

7.2CVSS7.7AI score0.00293EPSS
Exploits0References3
OSV
OSV
added 2021/11/15 9:15 p.m.32 views

CVE-2021-42376

A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted shell command, due to missing validation after a \x03 delimiter character. This may be used for DoS under very rare conditions of filtered command input...

5.5CVSS6.7AI score
Exploits0References5
OSV
OSV
added 2021/11/15 9:15 p.m.1 views

DEBIAN-CVE-2021-42376

A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted shell command, due to missing validation after a \x03 delimiter character. This may be used for DoS under very rare conditions of filtered command input...

5.5CVSS6.8AI score0.00045EPSS
Exploits0References1
NVD
NVD
added 2021/11/15 9:15 p.m.22 views

CVE-2021-42376

A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted shell command, due to missing validation after a \x03 delimiter character. This may be used for DoS under very rare conditions of filtered command input...

5.5CVSS0.00045EPSS
Exploits0References5
OSV
OSV
added 2021/11/15 9:15 p.m.22 views

CVE-2021-42377

An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafted shell command, due to the shell mishandling the &&& string. This may be used for remote code execution under rare conditions of filtered command input...

9.8CVSS7.8AI score
Exploits0References5
Prion
Prion
added 2021/11/15 9:15 p.m.30 views

Null pointer dereference

A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted shell command, due to missing validation after a \x03 delimiter character. This may be used for DoS under very rare conditions of filtered command input...

1.9CVSS5.9AI score0.00045EPSS
Exploits0References5Affected Software2
UbuntuCve
UbuntuCve
added 2021/11/15 9:15 p.m.45 views

CVE-2021-42376

A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted shell command, due to missing validation after a \x03 delimiter character. This may be used for DoS under very rare conditions of filtered command input...

5.5CVSS6.9AI score0.00045EPSS
Exploits0References2
Prion
Prion
added 2021/11/15 9:15 p.m.23 views

Design/Logic Flaw

An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafted shell command, due to the shell mishandling the &&& string. This may be used for remote code execution under rare conditions of filtered command input...

6.8CVSS9.5AI score0.02855EPSS
Exploits0References5Affected Software2
UbuntuCve
UbuntuCve
added 2021/11/15 9:15 p.m.52 views

CVE-2021-42377

An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafted shell command, due to the shell mishandling the &&& string. This may be used for remote code execution under rare conditions of filtered command input...

9.8CVSS7.5AI score0.02855EPSS
Exploits0References2
OSV
OSV
added 2021/11/15 9:15 p.m.0 views

UBUNTU-CVE-2021-42377

An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafted shell command, due to the shell mishandling the &&& string. This may be used for remote code execution under rare conditions of filtered command input...

9.8CVSS7.7AI score0.02855EPSS
Exploits0References3
Cvelist
Cvelist
added 2021/11/15 12:0 a.m.24 views

CVE-2021-42376

A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted shell command, due to missing validation after a \x03 delimiter character. This may be used for DoS under very rare conditions of filtered command input...

7.3AI score0.00045EPSS
Exploits0References5
CVE
CVE
added 2021/11/15 12:0 a.m.226 views

CVE-2021-42376

CVE-2021-42376 is a BusyBox vulnerability affecting the hush applet where a NULL pointer dereference can cause denial of service when processing a crafted command due to missing validation after a delimiter. Public disclosures and vendor advisories across multiple distributions (Debian, Alpine, F...

5.5CVSS6.9AI score0.00045EPSS
Exploits0References5Affected Software1
CNNVD
CNNVD
added 2021/11/15 12:0 a.m.2 views

BusyBox 代码问题漏洞

BusyBox is a suite of applications containing several linux commands and tools from the Ukrainian personal developer Denis Vlasenko. A code issue vulnerability exists in the Busybox hush applet, which stems from the fact that dereferencing the NULL pointer in Busybox's hush applet will result in ...

5.5CVSS6.9AI score0.00045EPSS
Exploits0References12
Debian CVE
Debian CVE
added 2021/11/15 12:0 a.m.43 views

CVE-2021-42376

A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted shell command, due to missing validation after a \x03 delimiter character. This may be used for DoS under very rare conditions of filtered command input...

5.5CVSS6.5AI score0.00045EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2021/11/15 12:0 a.m.35 views

CVE-2021-42376

A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted shell command, due to missing validation after a \x03 delimiter character. This may be used for DoS under very rare conditions of filtered command input...

5.5CVSS7.4AI score0.00045EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2021/11/15 12:0 a.m.43 views

CVE-2021-42377

An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafted shell command, due to the shell mishandling the &&& string. This may be used for remote code execution under rare conditions of filtered command input...

9.8CVSS9.8AI score0.02855EPSS
Exploits0
CNNVD
CNNVD
added 2021/11/15 12:0 a.m.3 views

Busybox 安全漏洞

A security vulnerability exists in the Busybox hush applet, which stems from the shell's incorrect handling of the &&&& string in the Busybox hush applet, which was developed by Denis Vlasenko, a Ukrainian developer. An attacker could exploit this vulnerability to cause a denial of service and...

9.8CVSS6.9AI score0.02855EPSS
Exploits0References11
Cvelist
Cvelist
added 2021/11/15 12:0 a.m.19 views

CVE-2021-42377

An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafted shell command, due to the shell mishandling the &&& string. This may be used for remote code execution under rare conditions of filtered command input...

9.8AI score0.02855EPSS
Exploits0References5
Rows per page
Query Builder