CVE-2021-42376

A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted shell command, due to missing validation after a \x03 delimiter character. This may be used for DoS under very rare conditions of filtered command input.
Configurations

Configuration 1 (hide)

cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*

Information

Published : 2021-11-15 21:15

Updated : 2021-11-25 03:15


NVD link : CVE-2021-42376

Mitre link : CVE-2021-42376


JSON object : View

Products Affected

busybox

  • busybox
CWE
CWE-476

NULL Pointer Dereference