Busybox: >> Busybox >> 1.32.1 Security Vulnerabilities
A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function
CVSS Score
7.2
EPSS Score
0.002
Published
2021-11-15
A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function
CVSS Score
7.2
EPSS Score
0.002
Published
2021-11-15
decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.
CVSS Score
7.5
EPSS Score
0.009
Published
2021-03-19
Page 2