CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-42374

An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 24.1%

CVSS Severity

CVSS v3 Score 5.3

CVSS v2 Score 3.3

References

Products affected by CVE-2021-42374

Busybox » Busybox » Version: 1.27.0

cpe:2.3:a:busybox:busybox:1.27.0
Busybox » Busybox » Version: 1.27.1

cpe:2.3:a:busybox:busybox:1.27.1
Busybox » Busybox » Version: 1.27.2

cpe:2.3:a:busybox:busybox:1.27.2
Busybox » Busybox » Version: 1.28.0

cpe:2.3:a:busybox:busybox:1.28.0
Busybox » Busybox » Version: 1.28.1

cpe:2.3:a:busybox:busybox:1.28.1
Busybox » Busybox » Version: 1.28.2

cpe:2.3:a:busybox:busybox:1.28.2
Busybox » Busybox » Version: 1.28.3

cpe:2.3:a:busybox:busybox:1.28.3
Busybox » Busybox » Version: 1.28.4

cpe:2.3:a:busybox:busybox:1.28.4
Busybox » Busybox » Version: 1.29.0

cpe:2.3:a:busybox:busybox:1.29.0
Busybox » Busybox » Version: 1.29.1

cpe:2.3:a:busybox:busybox:1.29.1
Busybox » Busybox » Version: 1.29.2

cpe:2.3:a:busybox:busybox:1.29.2
Busybox » Busybox » Version: 1.29.3

cpe:2.3:a:busybox:busybox:1.29.3
Busybox » Busybox » Version: 1.30.0

cpe:2.3:a:busybox:busybox:1.30.0
Busybox » Busybox » Version: 1.30.1

cpe:2.3:a:busybox:busybox:1.30.1
Busybox » Busybox » Version: 1.31.0

cpe:2.3:a:busybox:busybox:1.31.0
Busybox » Busybox » Version: 1.31.1

cpe:2.3:a:busybox:busybox:1.31.1
Busybox » Busybox » Version: 1.32.0

cpe:2.3:a:busybox:busybox:1.32.0
Busybox » Busybox » Version: 1.32.1

cpe:2.3:a:busybox:busybox:1.32.1
Busybox » Busybox » Version: 1.33.0

cpe:2.3:a:busybox:busybox:1.33.0
Busybox » Busybox » Version: 1.33.1

cpe:2.3:a:busybox:busybox:1.33.1
Netapp » Cloud Backup » Version: N/A

cpe:2.3:a:netapp:cloud_backup:-
Netapp » Hci Management Node » Version: N/A

cpe:2.3:a:netapp:hci_management_node:-
Netapp » Solidfire » Version: N/A

cpe:2.3:a:netapp:solidfire:-
Netapp » H300e » Version: N/A

cpe:2.3:h:netapp:h300e:-
Netapp » H300s » Version: N/A

cpe:2.3:h:netapp:h300s:-
Netapp » H410s » Version: N/A

cpe:2.3:h:netapp:h410s:-
Netapp » H500e » Version: N/A

cpe:2.3:h:netapp:h500e:-
Netapp » H500s » Version: N/A

cpe:2.3:h:netapp:h500s:-
Netapp » H700e » Version: N/A

cpe:2.3:h:netapp:h700e:-
Netapp » H700s » Version: N/A

cpe:2.3:h:netapp:h700s:-
Fedoraproject » Fedora » Version: 33

cpe:2.3:o:fedoraproject:fedora:33
Fedoraproject » Fedora » Version: 34

cpe:2.3:o:fedoraproject:fedora:34
Netapp » H300e Firmware » Version: N/A

cpe:2.3:o:netapp:h300e_firmware:-
Netapp » H300s Firmware » Version: N/A

cpe:2.3:o:netapp:h300s_firmware:-
Netapp » H410s Firmware » Version: N/A

cpe:2.3:o:netapp:h410s_firmware:-
Netapp » H500e Firmware » Version: N/A

cpe:2.3:o:netapp:h500e_firmware:-
Netapp » H500s Firmware » Version: N/A

cpe:2.3:o:netapp:h500s_firmware:-
Netapp » H700e Firmware » Version: N/A

cpe:2.3:o:netapp:h700e_firmware:-
Netapp » H700s Firmware » Version: N/A

cpe:2.3:o:netapp:h700s_firmware:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-42374

Products

Pricing

Contact Us