CVE-2026-38753

Опубликовано: 15 июл. 2026

Источник: nvd

CVSS3: 4.9

CVSS3: 7.5

EPSS Низкий

Описание

A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script.

Ссылки

https://busybox.net
https://lists.busybox.net/pipermail/busybox/2026-June/092352.html
Mailing List
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:busybox:busybox:1.38.0:*:*:*:*:*:*:*

EPSS

Процентиль: 4%

0.00145

Низкий

4.9 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVE-2026-38753

CVSS3: 4.9

ubuntu

22 дня назад

A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script.

CVE-2026-38753

CVSS3: 4.9

msrc

17 дней назад

A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script.

CVE-2026-38753

CVSS3: 4.9

debian

22 дня назад

A use-after-free in the awk_sub() function (editors/awk.c) of Busybox ...

GHSA-9r55-p3jw-v652

CVSS3: 7.5

github

22 дня назад

A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script.

EPSS

Процентиль: 4%

0.00145

Низкий

4.9 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-416