Vulnerabilities affecting this package (0)
| Vulnerability |
Summary |
Fixed by |
|
This package is not known to be affected by vulnerabilities.
|
Vulnerabilities fixed by this package (4)
| Vulnerability |
Summary |
Aliases |
|
VCID-7pk9-skex-aaam
|
A NULL pointer dereference in Busybox's man applet leads to denial of service when a section name is supplied but no page argument is given
|
CVE-2021-42373
|
|
VCID-av9h-6859-aaac
|
An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafted shell command, due to the shell mishandling the &&& string. This may be used for remote code execution under rare conditions of filtered command input.
|
CVE-2021-42377
|
|
VCID-bczg-wjhp-aaad
|
A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function
|
CVE-2021-42383
|
|
VCID-ebet-us66-aaaf
|
An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.
|
CVE-2021-42375
|