Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2023-42365 (GCVE-0-2023-42365)
Vulnerability from cvelistv5
Published
2023-11-27 00:00
Modified
2024-08-02 19:16
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- n/a
Summary
A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.
References
► | URL | Tags | |||||||||
---|---|---|---|---|---|---|---|---|---|---|---|
|
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-02T19:16:51.040Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_transferred" ], "url": "https://bugs.busybox.net/show_bug.cgi?id=15871" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "descriptions": [ { "lang": "en", "value": "A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2023-11-27T22:24:42.955118", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre" }, "references": [ { "url": "https://bugs.busybox.net/show_bug.cgi?id=15871" } ] } }, "cveMetadata": { "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2023-42365", "datePublished": "2023-11-27T00:00:00", "dateReserved": "2023-09-08T00:00:00", "dateUpdated": "2024-08-02T19:16:51.040Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "vulnerability-lookup:meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2023-42365\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2023-11-27T23:15:07.373\",\"lastModified\":\"2024-11-21T08:22:28.763\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.\"},{\"lang\":\"es\",\"value\":\"Se descubri\u00f3 una vulnerabilidad de use-after-free en BusyBox v.1.36.1 mediante un patr\u00f3n awk manipulado en la funci\u00f3n copyvar awk.c.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-416\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:busybox:busybox:1.36.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F729D66A-538E-421E-961F-8A484E6C6106\"}]}]}],\"references\":[{\"url\":\"https://bugs.busybox.net/show_bug.cgi?id=15871\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\",\"Issue Tracking\",\"Vendor Advisory\"]},{\"url\":\"https://bugs.busybox.net/show_bug.cgi?id=15871\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Issue Tracking\",\"Vendor Advisory\"]}]}}" } }
ghsa-j44g-3846-7q49
Vulnerability from github
Published
2023-11-28 00:30
Modified
2023-11-30 06:33
Severity ?
VLAI Severity ?
Details
A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.
{ "affected": [], "aliases": [ "CVE-2023-42365" ], "database_specific": { "cwe_ids": [ "CWE-416" ], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2023-11-27T23:15:07Z", "severity": "MODERATE" }, "details": "A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.", "id": "GHSA-j44g-3846-7q49", "modified": "2023-11-30T06:33:24Z", "published": "2023-11-28T00:30:33Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42365" }, { "type": "WEB", "url": "https://bugs.busybox.net/show_bug.cgi?id=15871" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "type": "CVSS_V3" } ] }
wid-sec-w-2023-3011
Vulnerability from csaf_certbund
Published
2023-11-27 23:00
Modified
2025-07-21 22:00
Summary
BusyBox: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
BusyBox ist ein Computerprogramm, das verschiedene Standard-Unix-Dienstprogramme in einem einzelnen Programm vereint.
Angriff
Ein lokaler Angreifer kann mehrere Schwachstellen in BusyBox ausnutzen, um einen Denial of Service Angriff durchzuführen oder unbekannte Auswirkungen zu verursachen.
Betroffene Betriebssysteme
- Linux
{ "document": { "aggregate_severity": { "text": "mittel" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "BusyBox ist ein Computerprogramm, das verschiedene Standard-Unix-Dienstprogramme in einem einzelnen Programm vereint.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein lokaler Angreifer kann mehrere Schwachstellen in BusyBox ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren oder unbekannte Auswirkungen zu verursachen.", "title": "Angriff" }, { "category": "general", "text": "- Linux", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2023-3011 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-3011.json" }, { "category": "self", "summary": "WID-SEC-2023-3011 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-3011" }, { "category": "external", "summary": "GitHub Advisory Database vom 2023-11-27", "url": "https://github.com/advisories/GHSA-j44g-3846-7q49" }, { "category": "external", "summary": "GitHub Advisory Database vom 2023-11-27", "url": "https://github.com/advisories/GHSA-qqqj-6rp2-5pw4" }, { "category": "external", "summary": "GitHub Advisory Database vom 2023-11-27", "url": "https://github.com/advisories/GHSA-wm78-9prw-c5h4" }, { "category": "external", "summary": "BusyBox Bugzilla vom 2023-11-27", "url": "https://bugs.busybox.net/show_bug.cgi?id=15865" }, { "category": "external", "summary": "BusyBox Bugzilla vom 2023-11-27", "url": "https://bugs.busybox.net/show_bug.cgi?id=15871" }, { "category": "external", "summary": "BusyBox Bugzilla vom 2023-11-27", "url": "https://bugs.busybox.net/show_bug.cgi?id=15868" }, { "category": "external", "summary": "NIST Database vom 2023-11-27", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42366" }, { "category": "external", "summary": "BusyBox Bugzilla vom 2023-11-27", "url": "https://bugs.busybox.net/show_bug.cgi?id=15874" }, { "category": "external", "summary": "Ubuntu Security Notice USN-6961-1 vom 2024-08-14", "url": "https://ubuntu.com/security/notices/USN-6961-1" }, { "category": "external", "summary": "Debian Security Advisory DLA-4019 vom 2025-01-19", "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html" }, { "category": "external", "summary": "openSUSE Security Update OPENSUSE-SU-2025:15361-1 vom 2025-07-21", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/TXPQWR4VYNLGUHEPNPESZ4R3VJ7CQR64/" } ], "source_lang": "en-US", "title": "BusyBox: Mehrere Schwachstellen", "tracking": { "current_release_date": "2025-07-21T22:00:00.000+00:00", "generator": { "date": "2025-07-22T07:37:01.024+00:00", "engine": { "name": "BSI-WID", "version": "1.4.0" } }, "id": "WID-SEC-W-2023-3011", "initial_release_date": "2023-11-27T23:00:00.000+00:00", "revision_history": [ { "date": "2023-11-27T23:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" }, { "date": "2024-08-14T22:00:00.000+00:00", "number": "2", "summary": "Neue Updates von Ubuntu aufgenommen" }, { "date": "2025-01-19T23:00:00.000+00:00", "number": "3", "summary": "Neue Updates von Debian aufgenommen" }, { "date": "2025-07-21T22:00:00.000+00:00", "number": "4", "summary": "Neue Updates von openSUSE aufgenommen" } ], "status": "final", "version": "4" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "Debian Linux", "product": { "name": "Debian Linux", "product_id": "2951", "product_identification_helper": { "cpe": "cpe:/o:debian:debian_linux:-" } } } ], "category": "vendor", "name": "Debian" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "1.36.1", "product": { "name": "Open Source BusyBox 1.36.1", "product_id": "T031371", "product_identification_helper": { "cpe": "cpe:/a:busybox:busybox:1.36.1" } } } ], "category": "product_name", "name": "BusyBox" } ], "category": "vendor", "name": "Open Source" }, { "branches": [ { "category": "product_name", "name": "SUSE openSUSE", "product": { "name": "SUSE openSUSE", "product_id": "T027843", "product_identification_helper": { "cpe": "cpe:/o:suse:opensuse:-" } } } ], "category": "vendor", "name": "SUSE" }, { "branches": [ { "category": "product_name", "name": "Ubuntu Linux", "product": { "name": "Ubuntu Linux", "product_id": "T000126", "product_identification_helper": { "cpe": "cpe:/o:canonical:ubuntu_linux:-" } } } ], "category": "vendor", "name": "Ubuntu" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-42363", "product_status": { "known_affected": [ "2951", "T000126", "T027843", "T031371" ] }, "release_date": "2023-11-27T23:00:00.000+00:00", "title": "CVE-2023-42363" }, { "cve": "CVE-2023-42364", "product_status": { "known_affected": [ "2951", "T000126", "T027843", "T031371" ] }, "release_date": "2023-11-27T23:00:00.000+00:00", "title": "CVE-2023-42364" }, { "cve": "CVE-2023-42365", "product_status": { "known_affected": [ "2951", "T000126", "T027843", "T031371" ] }, "release_date": "2023-11-27T23:00:00.000+00:00", "title": "CVE-2023-42365" }, { "cve": "CVE-2023-42366", "product_status": { "known_affected": [ "2951", "T000126", "T027843", "T031371" ] }, "release_date": "2023-11-27T23:00:00.000+00:00", "title": "CVE-2023-42366" } ] }
opensuse-su-2025:15361-1
Vulnerability from csaf_opensuse
Published
2025-07-20 00:00
Modified
2025-07-20 00:00
Summary
busybox-1.37.0-5.1 on GA media
Notes
Title of the patch
busybox-1.37.0-5.1 on GA media
Description of the patch
These are all security issues fixed in the busybox-1.37.0-5.1 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2025-15361
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "busybox-1.37.0-5.1 on GA media", "title": "Title of the patch" }, { "category": "description", "text": "These are all security issues fixed in the busybox-1.37.0-5.1 package on the GA media of openSUSE Tumbleweed.", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-Tumbleweed-2025-15361", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2025_15361-1.json" }, { "category": "self", "summary": "SUSE CVE CVE-2023-42363 page", "url": "https://www.suse.com/security/cve/CVE-2023-42363/" }, { "category": "self", "summary": "SUSE CVE CVE-2023-42364 page", "url": "https://www.suse.com/security/cve/CVE-2023-42364/" }, { "category": "self", "summary": "SUSE CVE CVE-2023-42365 page", "url": "https://www.suse.com/security/cve/CVE-2023-42365/" } ], "title": "busybox-1.37.0-5.1 on GA media", "tracking": { "current_release_date": "2025-07-20T00:00:00Z", "generator": { "date": "2025-07-20T00:00:00Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2025:15361-1", "initial_release_date": "2025-07-20T00:00:00Z", "revision_history": [ { "date": "2025-07-20T00:00:00Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "busybox-1.37.0-5.1.aarch64", "product": { "name": "busybox-1.37.0-5.1.aarch64", "product_id": "busybox-1.37.0-5.1.aarch64" } }, { "category": "product_version", "name": "busybox-static-1.37.0-5.1.aarch64", "product": { "name": "busybox-static-1.37.0-5.1.aarch64", "product_id": "busybox-static-1.37.0-5.1.aarch64" } }, { "category": "product_version", "name": "busybox-testsuite-1.37.0-5.1.aarch64", "product": { "name": "busybox-testsuite-1.37.0-5.1.aarch64", "product_id": "busybox-testsuite-1.37.0-5.1.aarch64" } }, { "category": "product_version", "name": "busybox-warewulf3-1.37.0-5.1.aarch64", "product": { "name": "busybox-warewulf3-1.37.0-5.1.aarch64", "product_id": "busybox-warewulf3-1.37.0-5.1.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "busybox-1.37.0-5.1.ppc64le", "product": { "name": "busybox-1.37.0-5.1.ppc64le", "product_id": "busybox-1.37.0-5.1.ppc64le" } }, { "category": "product_version", "name": "busybox-static-1.37.0-5.1.ppc64le", "product": { "name": "busybox-static-1.37.0-5.1.ppc64le", "product_id": "busybox-static-1.37.0-5.1.ppc64le" } }, { "category": "product_version", "name": "busybox-testsuite-1.37.0-5.1.ppc64le", "product": { "name": "busybox-testsuite-1.37.0-5.1.ppc64le", "product_id": "busybox-testsuite-1.37.0-5.1.ppc64le" } }, { "category": "product_version", "name": "busybox-warewulf3-1.37.0-5.1.ppc64le", "product": { "name": "busybox-warewulf3-1.37.0-5.1.ppc64le", "product_id": "busybox-warewulf3-1.37.0-5.1.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "busybox-1.37.0-5.1.s390x", "product": { "name": "busybox-1.37.0-5.1.s390x", "product_id": "busybox-1.37.0-5.1.s390x" } }, { "category": "product_version", "name": "busybox-static-1.37.0-5.1.s390x", "product": { "name": "busybox-static-1.37.0-5.1.s390x", "product_id": "busybox-static-1.37.0-5.1.s390x" } }, { "category": "product_version", "name": "busybox-testsuite-1.37.0-5.1.s390x", "product": { "name": "busybox-testsuite-1.37.0-5.1.s390x", "product_id": "busybox-testsuite-1.37.0-5.1.s390x" } }, { "category": "product_version", "name": "busybox-warewulf3-1.37.0-5.1.s390x", "product": { "name": "busybox-warewulf3-1.37.0-5.1.s390x", "product_id": "busybox-warewulf3-1.37.0-5.1.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "busybox-1.37.0-5.1.x86_64", "product": { "name": "busybox-1.37.0-5.1.x86_64", "product_id": "busybox-1.37.0-5.1.x86_64" } }, { "category": "product_version", "name": "busybox-static-1.37.0-5.1.x86_64", "product": { "name": "busybox-static-1.37.0-5.1.x86_64", "product_id": "busybox-static-1.37.0-5.1.x86_64" } }, { "category": "product_version", "name": "busybox-testsuite-1.37.0-5.1.x86_64", "product": { "name": "busybox-testsuite-1.37.0-5.1.x86_64", "product_id": "busybox-testsuite-1.37.0-5.1.x86_64" } }, { "category": "product_version", "name": "busybox-warewulf3-1.37.0-5.1.x86_64", "product": { "name": "busybox-warewulf3-1.37.0-5.1.x86_64", "product_id": "busybox-warewulf3-1.37.0-5.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Tumbleweed", "product": { "name": "openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed", "product_identification_helper": { "cpe": "cpe:/o:opensuse:tumbleweed" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "busybox-1.37.0-5.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:busybox-1.37.0-5.1.aarch64" }, "product_reference": "busybox-1.37.0-5.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "busybox-1.37.0-5.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:busybox-1.37.0-5.1.ppc64le" }, "product_reference": "busybox-1.37.0-5.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "busybox-1.37.0-5.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:busybox-1.37.0-5.1.s390x" }, "product_reference": "busybox-1.37.0-5.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "busybox-1.37.0-5.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:busybox-1.37.0-5.1.x86_64" }, "product_reference": "busybox-1.37.0-5.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "busybox-static-1.37.0-5.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.aarch64" }, "product_reference": "busybox-static-1.37.0-5.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "busybox-static-1.37.0-5.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.ppc64le" }, "product_reference": "busybox-static-1.37.0-5.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "busybox-static-1.37.0-5.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.s390x" }, "product_reference": "busybox-static-1.37.0-5.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "busybox-static-1.37.0-5.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.x86_64" }, "product_reference": "busybox-static-1.37.0-5.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "busybox-testsuite-1.37.0-5.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.aarch64" }, "product_reference": "busybox-testsuite-1.37.0-5.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "busybox-testsuite-1.37.0-5.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.ppc64le" }, "product_reference": "busybox-testsuite-1.37.0-5.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "busybox-testsuite-1.37.0-5.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.s390x" }, "product_reference": "busybox-testsuite-1.37.0-5.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "busybox-testsuite-1.37.0-5.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.x86_64" }, "product_reference": "busybox-testsuite-1.37.0-5.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "busybox-warewulf3-1.37.0-5.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.aarch64" }, "product_reference": "busybox-warewulf3-1.37.0-5.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "busybox-warewulf3-1.37.0-5.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.ppc64le" }, "product_reference": "busybox-warewulf3-1.37.0-5.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "busybox-warewulf3-1.37.0-5.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.s390x" }, "product_reference": "busybox-warewulf3-1.37.0-5.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "busybox-warewulf3-1.37.0-5.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.x86_64" }, "product_reference": "busybox-warewulf3-1.37.0-5.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-42363", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-42363" } ], "notes": [ { "category": "general", "text": "A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:busybox-1.37.0-5.1.aarch64", "openSUSE Tumbleweed:busybox-1.37.0-5.1.ppc64le", "openSUSE Tumbleweed:busybox-1.37.0-5.1.s390x", "openSUSE Tumbleweed:busybox-1.37.0-5.1.x86_64", "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.aarch64", "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.ppc64le", "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.s390x", "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.x86_64", "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.aarch64", "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.ppc64le", "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.s390x", "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.x86_64", "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.aarch64", "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.ppc64le", "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.s390x", "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2023-42363", "url": "https://www.suse.com/security/cve/CVE-2023-42363" }, { "category": "external", "summary": "SUSE Bug 1217580 for CVE-2023-42363", "url": "https://bugzilla.suse.com/1217580" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:busybox-1.37.0-5.1.aarch64", "openSUSE Tumbleweed:busybox-1.37.0-5.1.ppc64le", "openSUSE Tumbleweed:busybox-1.37.0-5.1.s390x", "openSUSE Tumbleweed:busybox-1.37.0-5.1.x86_64", "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.aarch64", "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.ppc64le", "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.s390x", "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.x86_64", "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.aarch64", "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.ppc64le", "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.s390x", "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.x86_64", "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.aarch64", "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.ppc64le", "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.s390x", "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:busybox-1.37.0-5.1.aarch64", "openSUSE Tumbleweed:busybox-1.37.0-5.1.ppc64le", "openSUSE Tumbleweed:busybox-1.37.0-5.1.s390x", "openSUSE Tumbleweed:busybox-1.37.0-5.1.x86_64", "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.aarch64", "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.ppc64le", "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.s390x", "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.x86_64", "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.aarch64", "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.ppc64le", "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.s390x", "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.x86_64", "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.aarch64", "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.ppc64le", "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.s390x", "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2025-07-20T00:00:00Z", "details": "moderate" } ], "title": "CVE-2023-42363" }, { "cve": "CVE-2023-42364", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-42364" } ], "notes": [ { "category": "general", "text": "A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:busybox-1.37.0-5.1.aarch64", "openSUSE Tumbleweed:busybox-1.37.0-5.1.ppc64le", "openSUSE Tumbleweed:busybox-1.37.0-5.1.s390x", "openSUSE Tumbleweed:busybox-1.37.0-5.1.x86_64", "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.aarch64", "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.ppc64le", "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.s390x", "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.x86_64", "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.aarch64", "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.ppc64le", "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.s390x", "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.x86_64", "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.aarch64", "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.ppc64le", "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.s390x", "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2023-42364", "url": "https://www.suse.com/security/cve/CVE-2023-42364" }, { "category": "external", "summary": "SUSE Bug 1217584 for CVE-2023-42364", "url": "https://bugzilla.suse.com/1217584" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:busybox-1.37.0-5.1.aarch64", "openSUSE Tumbleweed:busybox-1.37.0-5.1.ppc64le", "openSUSE Tumbleweed:busybox-1.37.0-5.1.s390x", "openSUSE Tumbleweed:busybox-1.37.0-5.1.x86_64", "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.aarch64", "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.ppc64le", "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.s390x", "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.x86_64", "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.aarch64", "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.ppc64le", "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.s390x", "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.x86_64", "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.aarch64", "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.ppc64le", "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.s390x", "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:busybox-1.37.0-5.1.aarch64", "openSUSE Tumbleweed:busybox-1.37.0-5.1.ppc64le", "openSUSE Tumbleweed:busybox-1.37.0-5.1.s390x", "openSUSE Tumbleweed:busybox-1.37.0-5.1.x86_64", "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.aarch64", "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.ppc64le", "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.s390x", "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.x86_64", "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.aarch64", "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.ppc64le", "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.s390x", "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.x86_64", "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.aarch64", "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.ppc64le", "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.s390x", "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2025-07-20T00:00:00Z", "details": "moderate" } ], "title": "CVE-2023-42364" }, { "cve": "CVE-2023-42365", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-42365" } ], "notes": [ { "category": "general", "text": "A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:busybox-1.37.0-5.1.aarch64", "openSUSE Tumbleweed:busybox-1.37.0-5.1.ppc64le", "openSUSE Tumbleweed:busybox-1.37.0-5.1.s390x", "openSUSE Tumbleweed:busybox-1.37.0-5.1.x86_64", "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.aarch64", "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.ppc64le", "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.s390x", "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.x86_64", "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.aarch64", "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.ppc64le", "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.s390x", "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.x86_64", "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.aarch64", "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.ppc64le", "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.s390x", "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2023-42365", "url": "https://www.suse.com/security/cve/CVE-2023-42365" }, { "category": "external", "summary": "SUSE Bug 1217585 for CVE-2023-42365", "url": "https://bugzilla.suse.com/1217585" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:busybox-1.37.0-5.1.aarch64", "openSUSE Tumbleweed:busybox-1.37.0-5.1.ppc64le", "openSUSE Tumbleweed:busybox-1.37.0-5.1.s390x", "openSUSE Tumbleweed:busybox-1.37.0-5.1.x86_64", "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.aarch64", "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.ppc64le", "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.s390x", "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.x86_64", "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.aarch64", "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.ppc64le", "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.s390x", "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.x86_64", "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.aarch64", "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.ppc64le", "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.s390x", "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:busybox-1.37.0-5.1.aarch64", "openSUSE Tumbleweed:busybox-1.37.0-5.1.ppc64le", "openSUSE Tumbleweed:busybox-1.37.0-5.1.s390x", "openSUSE Tumbleweed:busybox-1.37.0-5.1.x86_64", "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.aarch64", "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.ppc64le", "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.s390x", "openSUSE Tumbleweed:busybox-static-1.37.0-5.1.x86_64", "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.aarch64", "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.ppc64le", "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.s390x", "openSUSE Tumbleweed:busybox-testsuite-1.37.0-5.1.x86_64", "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.aarch64", "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.ppc64le", "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.s390x", "openSUSE Tumbleweed:busybox-warewulf3-1.37.0-5.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2025-07-20T00:00:00Z", "details": "moderate" } ], "title": "CVE-2023-42365" } ] }
fkie_cve-2023-42365
Vulnerability from fkie_nvd
Published
2023-11-27 23:15
Modified
2024-11-21 08:22
Severity ?
Summary
A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.
References
▶ | URL | Tags | |
---|---|---|---|
cve@mitre.org | https://bugs.busybox.net/show_bug.cgi?id=15871 | Exploit, Issue Tracking, Vendor Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://bugs.busybox.net/show_bug.cgi?id=15871 | Exploit, Issue Tracking, Vendor Advisory |
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:busybox:busybox:1.36.1:*:*:*:*:*:*:*", "matchCriteriaId": "F729D66A-538E-421E-961F-8A484E6C6106", "vulnerable": true } ], "negate": false, "operator": "OR" } ] } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function." }, { "lang": "es", "value": "Se descubri\u00f3 una vulnerabilidad de use-after-free en BusyBox v.1.36.1 mediante un patr\u00f3n awk manipulado en la funci\u00f3n copyvar awk.c." } ], "id": "CVE-2023-42365", "lastModified": "2024-11-21T08:22:28.763", "metrics": { "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2023-11-27T23:15:07.373", "references": [ { "source": "cve@mitre.org", "tags": [ "Exploit", "Issue Tracking", "Vendor Advisory" ], "url": "https://bugs.busybox.net/show_bug.cgi?id=15871" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Exploit", "Issue Tracking", "Vendor Advisory" ], "url": "https://bugs.busybox.net/show_bug.cgi?id=15871" } ], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-416" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
gsd-2023-42365
Vulnerability from gsd
Modified
2023-12-13 01:20
Details
A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.
Aliases
Aliases
{ "GSD": { "alias": "CVE-2023-42365", "id": "GSD-2023-42365" }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2023-42365" ], "details": "A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.", "id": "GSD-2023-42365", "modified": "2023-12-13T01:20:21.893152Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2023-42365", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "https://bugs.busybox.net/show_bug.cgi?id=15871", "refsource": "MISC", "url": "https://bugs.busybox.net/show_bug.cgi?id=15871" } ] } }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:busybox:busybox:1.36.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2023-42365" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": "A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "CWE-416" } ] } ] }, "references": { "reference_data": [ { "name": "https://bugs.busybox.net/show_bug.cgi?id=15871", "refsource": "", "tags": [ "Exploit", "Issue Tracking", "Vendor Advisory" ], "url": "https://bugs.busybox.net/show_bug.cgi?id=15871" } ] } }, "impact": { "baseMetricV3": { "cvssV3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "exploitabilityScore": 1.8, "impactScore": 3.6 } }, "lastModifiedDate": "2023-11-30T05:08Z", "publishedDate": "2023-11-27T23:15Z" } } }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…