CVE-2023-42364

Name

CVE-2023-42364

Description

A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.

NVD Severity

unknown

Other trackers

CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia

Mailing lists

oss-security, full-disclosure, bugtraq

Exploits

Exploit DB, Metasploit

Forges

GitHub (code, issues), Aports (code, issues)

References

Type	URI
Exploit	https://bugs.busybox.net/show_bug.cgi?id=15868

Match rules

CPE URI	Source package	Min version	Max version
`cpe:2.3:a:busybox:busybox:1.36.1:::::::*`	busybox	== 1.36.1	== 1.36.1

Vulnerable and fixed packages

Source package	Branch	Version	Maintainer	Status
busybox	3.20-main	1.36.1-r29	Sören Tempel <soeren+alpine@soeren-tempel.net>	fixed
busybox	edge-main	1.36.1-r31	Sören Tempel <soeren+alpine@soeren-tempel.net>	fixed
busybox	3.19-main	1.36.1-r19	Sören Tempel <soeren+alpine@soeren-tempel.net>	fixed
busybox	3.18-main	1.36.1-r7	Sören Tempel <soeren+alpine@soeren-tempel.net>	fixed
busybox	3.17-main	1.35.0-r31	Sören Tempel <soeren+alpine@soeren-tempel.net>	fixed