CVE-2021-42383
Published: 15 November 2021
A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function
Priority
Low
CVSS 3 base score: 7.2
Status
| Package | Release | Status |
|---|---|---|
|
busybox Launchpad, Ubuntu, Debian |
Upstream |
Released
(1.34.0)
|
| Ubuntu 21.10 (Impish Indri) |
Not vulnerable
(1:1.30.1-6ubuntu3)
|
|
| Ubuntu 21.04 (Hirsute Hippo) |
Not vulnerable
(1:1.30.1-6ubuntu2)
|
|
| Ubuntu 20.04 LTS (Focal Fossa) |
Not vulnerable
(1:1.30.1-4ubuntu6.3)
|
|
| Ubuntu 18.04 LTS (Bionic Beaver) |
Not vulnerable
(1:1.27.2-2ubuntu3.3)
|
|
| Ubuntu 16.04 ESM (Xenial Xerus) |
Not vulnerable
|
|
| Ubuntu 14.04 ESM (Trusty Tahr) |
Not vulnerable
|