CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-42375

An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 16.1%

CVSS Severity

CVSS v3 Score 5.5

CVSS v2 Score 1.9

References

Products affected by CVE-2021-42375

Busybox » Busybox » Version: 1.33.1

cpe:2.3:a:busybox:busybox:1.33.1
Netapp » Cloud Backup » Version: N/A

cpe:2.3:a:netapp:cloud_backup:-
Netapp » Hci Management Node » Version: N/A

cpe:2.3:a:netapp:hci_management_node:-
Netapp » Solidfire » Version: N/A

cpe:2.3:a:netapp:solidfire:-
Netapp » H300e » Version: N/A

cpe:2.3:h:netapp:h300e:-
Netapp » H300s » Version: N/A

cpe:2.3:h:netapp:h300s:-
Netapp » H410s » Version: N/A

cpe:2.3:h:netapp:h410s:-
Netapp » H500e » Version: N/A

cpe:2.3:h:netapp:h500e:-
Netapp » H500s » Version: N/A

cpe:2.3:h:netapp:h500s:-
Netapp » H700e » Version: N/A

cpe:2.3:h:netapp:h700e:-
Netapp » H700s » Version: N/A

cpe:2.3:h:netapp:h700s:-
Fedoraproject » Fedora » Version: 33

cpe:2.3:o:fedoraproject:fedora:33
Fedoraproject » Fedora » Version: 34

cpe:2.3:o:fedoraproject:fedora:34
Netapp » H300e Firmware » Version: N/A

cpe:2.3:o:netapp:h300e_firmware:-
Netapp » H300s Firmware » Version: N/A

cpe:2.3:o:netapp:h300s_firmware:-
Netapp » H410s Firmware » Version: N/A

cpe:2.3:o:netapp:h410s_firmware:-
Netapp » H500e Firmware » Version: N/A

cpe:2.3:o:netapp:h500e_firmware:-
Netapp » H500s Firmware » Version: N/A

cpe:2.3:o:netapp:h500s_firmware:-
Netapp » H700e Firmware » Version: N/A

cpe:2.3:o:netapp:h700e_firmware:-
Netapp » H700s Firmware » Version: N/A

cpe:2.3:o:netapp:h700s_firmware:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-42375

Products

Pricing

Contact Us