CVE-2023-42365

Опубликовано: 27 нояб. 2023

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.

Ссылки

https://bugs.busybox.net/show_bug.cgi?id=15871
Exploit
Issue Tracking
Vendor Advisory
https://bugs.busybox.net/show_bug.cgi?id=15871
Exploit
Issue Tracking
Vendor Advisory
https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:busybox:busybox:1.36.1:*:*:*:*:*:*:*

EPSS

Процентиль: 9%

0.00032

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVE-2023-42365

CVSS3: 5.5

ubuntu

около 2 лет назад

A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.

CVE-2023-42365

CVSS3: 7.8

redhat

около 2 лет назад

A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.

CVE-2023-42365

CVSS3: 5.5

msrc

больше 1 года назад

Описание отсутствует

CVE-2023-42365

CVSS3: 5.5

debian

около 2 лет назад

A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via ...

GHSA-j44g-3846-7q49

CVSS3: 5.5

github

около 2 лет назад

A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.

EPSS

Процентиль: 9%

0.00032

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-416