PT-2021-23604 · Busybox+3 · Busybox+3

Published 2021-11-09 · Updated 2025-04-30 · CVE-2021-42375

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Busybox (affected versions not specified)

Description An issue in Busybox's ash applet causes a denial of service when it processes a specially crafted shell command. This happens because the shell incorrectly identifies certain characters as reserved characters. The issue can be exploited for denial of service under specific conditions where command input is filtered.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Weakness Enumeration

CWE-159

CWE-20

Related Identifiers

BDU:2025-05995

CVE-2021-42375

OPENSUSE-SU-2022:0135-1

OPENSUSE-SU-2022_0135-1

OPENSUSE-SU-2022_3959-1

SUSE-SU-2022:0135-1

SUSE-SU-2022:0135-2

SUSE-SU-2022:3959-1

SUSE-SU-2022:4253-1

Affected Products

Busybox

Debian

Red Os

Suse

References · 75

• https://osv.dev/vulnerability/SUSE-SU-2022:3959-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:4253-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-42375 · Security Note
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:0135-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-42375 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-42375 · Security Note
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2021-42375 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:0135-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-42375 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-05995 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2022:0135-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-42375 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-42375 · Vendor Advisory