CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-42376

A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted shell command, due to missing validation after a \x03 delimiter character. This may be used for DoS under very rare conditions of filtered command input.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 6.2%

CVSS Severity

CVSS v3 Score 5.5

CVSS v2 Score 1.9

References

Products affected by CVE-2021-42376

Busybox » Busybox » Version: 1.16.0

cpe:2.3:a:busybox:busybox:1.16.0
Busybox » Busybox » Version: 1.16.1

cpe:2.3:a:busybox:busybox:1.16.1
Busybox » Busybox » Version: 1.16.2

cpe:2.3:a:busybox:busybox:1.16.2
Busybox » Busybox » Version: 1.17.0

cpe:2.3:a:busybox:busybox:1.17.0
Busybox » Busybox » Version: 1.17.1

cpe:2.3:a:busybox:busybox:1.17.1
Busybox » Busybox » Version: 1.17.2

cpe:2.3:a:busybox:busybox:1.17.2
Busybox » Busybox » Version: 1.17.3

cpe:2.3:a:busybox:busybox:1.17.3
Busybox » Busybox » Version: 1.17.4

cpe:2.3:a:busybox:busybox:1.17.4
Busybox » Busybox » Version: 1.18.0

cpe:2.3:a:busybox:busybox:1.18.0
Busybox » Busybox » Version: 1.18.1

cpe:2.3:a:busybox:busybox:1.18.1
Busybox » Busybox » Version: 1.18.2

cpe:2.3:a:busybox:busybox:1.18.2
Busybox » Busybox » Version: 1.18.3

cpe:2.3:a:busybox:busybox:1.18.3
Busybox » Busybox » Version: 1.18.4

cpe:2.3:a:busybox:busybox:1.18.4
Busybox » Busybox » Version: 1.18.5

cpe:2.3:a:busybox:busybox:1.18.5
Busybox » Busybox » Version: 1.19.0

cpe:2.3:a:busybox:busybox:1.19.0
Busybox » Busybox » Version: 1.19.1

cpe:2.3:a:busybox:busybox:1.19.1
Busybox » Busybox » Version: 1.19.2

cpe:2.3:a:busybox:busybox:1.19.2
Busybox » Busybox » Version: 1.19.3

cpe:2.3:a:busybox:busybox:1.19.3
Busybox » Busybox » Version: 1.19.4

cpe:2.3:a:busybox:busybox:1.19.4
Busybox » Busybox » Version: 1.20.0

cpe:2.3:a:busybox:busybox:1.20.0
Busybox » Busybox » Version: 1.20.1

cpe:2.3:a:busybox:busybox:1.20.1
Busybox » Busybox » Version: 1.20.2

cpe:2.3:a:busybox:busybox:1.20.2
Busybox » Busybox » Version: 1.21.0

cpe:2.3:a:busybox:busybox:1.21.0
Busybox » Busybox » Version: 1.21.1

cpe:2.3:a:busybox:busybox:1.21.1
Busybox » Busybox » Version: 1.22.0

cpe:2.3:a:busybox:busybox:1.22.0
Busybox » Busybox » Version: 1.22.1

cpe:2.3:a:busybox:busybox:1.22.1
Busybox » Busybox » Version: 1.23.0

cpe:2.3:a:busybox:busybox:1.23.0
Busybox » Busybox » Version: 1.23.1

cpe:2.3:a:busybox:busybox:1.23.1
Busybox » Busybox » Version: 1.23.2

cpe:2.3:a:busybox:busybox:1.23.2
Busybox » Busybox » Version: 1.24.0

cpe:2.3:a:busybox:busybox:1.24.0
Busybox » Busybox » Version: 1.24.1

cpe:2.3:a:busybox:busybox:1.24.1
Busybox » Busybox » Version: 1.24.2

cpe:2.3:a:busybox:busybox:1.24.2
Busybox » Busybox » Version: 1.25.0

cpe:2.3:a:busybox:busybox:1.25.0
Busybox » Busybox » Version: 1.25.1

cpe:2.3:a:busybox:busybox:1.25.1
Busybox » Busybox » Version: 1.26.0

cpe:2.3:a:busybox:busybox:1.26.0
Busybox » Busybox » Version: 1.26.1

cpe:2.3:a:busybox:busybox:1.26.1
Busybox » Busybox » Version: 1.26.2

cpe:2.3:a:busybox:busybox:1.26.2
Busybox » Busybox » Version: 1.27.0

cpe:2.3:a:busybox:busybox:1.27.0
Busybox » Busybox » Version: 1.27.1

cpe:2.3:a:busybox:busybox:1.27.1
Busybox » Busybox » Version: 1.27.2

cpe:2.3:a:busybox:busybox:1.27.2
Busybox » Busybox » Version: 1.28.0

cpe:2.3:a:busybox:busybox:1.28.0
Busybox » Busybox » Version: 1.28.1

cpe:2.3:a:busybox:busybox:1.28.1
Busybox » Busybox » Version: 1.28.2

cpe:2.3:a:busybox:busybox:1.28.2
Busybox » Busybox » Version: 1.28.3

cpe:2.3:a:busybox:busybox:1.28.3
Busybox » Busybox » Version: 1.28.4

cpe:2.3:a:busybox:busybox:1.28.4
Busybox » Busybox » Version: 1.29.0

cpe:2.3:a:busybox:busybox:1.29.0
Busybox » Busybox » Version: 1.29.1

cpe:2.3:a:busybox:busybox:1.29.1
Busybox » Busybox » Version: 1.29.2

cpe:2.3:a:busybox:busybox:1.29.2
Busybox » Busybox » Version: 1.29.3

cpe:2.3:a:busybox:busybox:1.29.3
Busybox » Busybox » Version: 1.30.0

cpe:2.3:a:busybox:busybox:1.30.0
Busybox » Busybox » Version: 1.30.1

cpe:2.3:a:busybox:busybox:1.30.1
Busybox » Busybox » Version: 1.31.0

cpe:2.3:a:busybox:busybox:1.31.0
Busybox » Busybox » Version: 1.31.1

cpe:2.3:a:busybox:busybox:1.31.1
Busybox » Busybox » Version: 1.32.0

cpe:2.3:a:busybox:busybox:1.32.0
Busybox » Busybox » Version: 1.32.1

cpe:2.3:a:busybox:busybox:1.32.1
Busybox » Busybox » Version: 1.33.0

cpe:2.3:a:busybox:busybox:1.33.0
Busybox » Busybox » Version: 1.33.1

cpe:2.3:a:busybox:busybox:1.33.1
Busybox » Busybox » Version: 1.33.2

cpe:2.3:a:busybox:busybox:1.33.2
Netapp » Cloud Backup » Version: N/A

cpe:2.3:a:netapp:cloud_backup:-
Netapp » Hci Management Node » Version: N/A

cpe:2.3:a:netapp:hci_management_node:-
Netapp » Solidfire » Version: N/A

cpe:2.3:a:netapp:solidfire:-
Netapp » H300e » Version: N/A

cpe:2.3:h:netapp:h300e:-
Netapp » H300s » Version: N/A

cpe:2.3:h:netapp:h300s:-
Netapp » H410s » Version: N/A

cpe:2.3:h:netapp:h410s:-
Netapp » H500e » Version: N/A

cpe:2.3:h:netapp:h500e:-
Netapp » H500s » Version: N/A

cpe:2.3:h:netapp:h500s:-
Netapp » H700e » Version: N/A

cpe:2.3:h:netapp:h700e:-
Netapp » H700s » Version: N/A

cpe:2.3:h:netapp:h700s:-
Fedoraproject » Fedora » Version: 33

cpe:2.3:o:fedoraproject:fedora:33
Fedoraproject » Fedora » Version: 34

cpe:2.3:o:fedoraproject:fedora:34
Netapp » H300e Firmware » Version: N/A

cpe:2.3:o:netapp:h300e_firmware:-
Netapp » H300s Firmware » Version: N/A

cpe:2.3:o:netapp:h300s_firmware:-
Netapp » H410s Firmware » Version: N/A

cpe:2.3:o:netapp:h410s_firmware:-
Netapp » H500e Firmware » Version: N/A

cpe:2.3:o:netapp:h500e_firmware:-
Netapp » H500s Firmware » Version: N/A

cpe:2.3:o:netapp:h500s_firmware:-
Netapp » H700e Firmware » Version: N/A

cpe:2.3:o:netapp:h700e_firmware:-
Netapp » H700s Firmware » Version: N/A

cpe:2.3:o:netapp:h700s_firmware:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-42376

Products

Pricing

Contact Us