CVE-2021-42382

7.2

HIGHCVSS v3

Published

November 15, 2021

CVSS v2

6.5 MEDIUM

Affected

8 projects

Assigned by

[email protected]

Severity scale

010

Description

A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function

busybox

Docker HubBusybox base image.

>= 1.26.0, <= 1.33.1NVD

BusyBox

Python Package Index dependency injector

>= 1.26.0, <= 1.33.1NVD

busybox

NPM

More on this CVE

NVD↗GitHub Advisory↗

this zero-dependency package will provide a collection of high-level functions to to build, test, and deploy webapps

>= 1.26.0, <= 1.33.1NVD

fedora

Crates.ioBase library for interacting with Fedora web services

= 33, = 34NVD

fedora

Python Package IndexPlaceholder for the fedora name

= 33, = 34NVD

fedora

Docker HubOfficial Docker builds of Fedora

= 33, = 34NVD

fedora

NPMDigital Repository Ireland - fedora backend operations

= 33, = 34NVD

fedora

RubyGemsSet of capistrano recipies for automating creation of Fedora servers.

= 33, = 34NVD

Security Advisories

CVE-2021-42382

Description

More on this CVE