Lucene search

MitreCVE-2023-42365

HistoryNov 27, 2023 - 11:15 p.m.

CVE-2023-42365

2023-11-2723:15:07

CWE-416

mitre

web.nvd.nist.gov

cve-2023-42365

vulnerability

busybox

use-after-free

nvd

awk.c

copyvar function

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

5.3

Confidence

High

EPSS

Percentile

12.7%

JSON

A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.

Affected configurations

Nvd

Node

busyboxbusyboxMatch1.36.1

VendorProductVersionCPE
busyboxbusybox1.36.1cpe:2.3:a:busybox:busybox:1.36.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
busybox	busybox	1.36.1	cpe:2.3:a:busybox:busybox:1.36.1:::::::*

References

bugs.busybox.net/show_bug.cgi?id=15871

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

5.3

Confidence

High

EPSS

Percentile

12.7%

JSON

Related for CVE-2023-42365