PT-2023-7296 · Busybox+6 · Busybox+6
Zclin
·
Publicado
2023-11-27
·
Atualizado
2026-03-13
·
CVE-2023-42364
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
BusyBox version 1.36.1
Description
The issue is related to a use-after-free vulnerability in the
evaluate function of the awk.c file in the BusyBox set of UNIX utilities. This vulnerability can be exploited by attackers to cause a denial of service via a crafted awk pattern.Recommendations
For BusyBox version 1.36.1, consider disabling the
evaluate function in the awk.c file as a temporary workaround until a patch is available. Restrict access to the awk utility to minimize the risk of exploitation.Exploit
Correção
DoS
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Astra Linux
Busybox
Debian
Linuxmint
Suse
Ubuntu