CVE-2021-28831

7.5

HIGHCVSS v3

Published

March 19, 2021

CVSS v2

5 MEDIUM

Affected

8 projects

Assigned by

MITRE

Severity scale

010

Description

decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.

busybox

Docker HubBusybox base image.

>= 1.32.0, <= 1.32.1NVD

BusyBox

Python Package Index dependency injector

>= 1.32.0, <= 1.32.1NVD

busybox

NPM

More on this CVE

NVD↗GitHub Advisory↗

this zero-dependency package will provide a collection of high-level functions to to build, test, and deploy webapps

>= 1.32.0, <= 1.32.1NVD

fedora

Crates.ioBase library for interacting with Fedora web services

= 32, = 33, = 34NVD

fedora

Python Package IndexPlaceholder for the fedora name

= 32, = 33, = 34NVD

fedora

Docker HubOfficial Docker builds of Fedora

= 32, = 33, = 34NVD

fedora

NPMDigital Repository Ireland - fedora backend operations

= 32, = 33, = 34NVD

fedora

RubyGemsSet of capistrano recipies for automating creation of Fedora servers.

= 32, = 33, = 34NVD

Security Advisories

CVE-2021-28831

Description

More on this CVE