CVE-2021-42374

5.3

MEDIUMCVSS v3

Published

November 15, 2021

CVSS v2

3.3 LOW

Affected

8 projects

Assigned by

[email protected]

Severity scale

010

Description

An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that

busybox

Docker HubBusybox base image.

>= 1.27.0, <= 1.33.1NVD

BusyBox

Python Package Index dependency injector

>= 1.27.0, <= 1.33.1NVD

busybox

NPM

More on this CVE

NVD↗GitHub Advisory↗

this zero-dependency package will provide a collection of high-level functions to to build, test, and deploy webapps

>= 1.27.0, <= 1.33.1NVD

fedora

Crates.ioBase library for interacting with Fedora web services

= 33, = 34NVD

fedora

Python Package IndexPlaceholder for the fedora name

= 33, = 34NVD

fedora

Docker HubOfficial Docker builds of Fedora

= 33, = 34NVD

fedora

NPMDigital Repository Ireland - fedora backend operations

= 33, = 34NVD

fedora

RubyGemsSet of capistrano recipies for automating creation of Fedora servers.

= 33, = 34NVD

Security Advisories

CVE-2021-42374

Description

More on this CVE