A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade busybox | Mar 26, 2024 | May 18, 2022 |
| Amazon_linux | — | Upgrade busybox | Jul 20, 2023 | May 18, 2022 |
| Debian | — | Upgrade busyboxNo solution exists | May 15, 2025 | May 18, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade busybox-help | Nov 3, 2022 | May 18, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade busybox-help | Nov 15, 2022 | May 18, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 18, 2022 |
| Suse | — | Upgrade busybox-coreutilsUpgrade busybox-miscUpgrade busybox-wgetUpgrade busybox-selinux-toolsUpgrade busybox-tracerouteUpgrade busybox-findutilsUpgrade busybox-patchUpgrade busybox-sharutilsUpgrade busybox-tftpUpgrade busybox-telnetUpgrade busybox-iputilsUpgrade busybox-testsuiteUpgrade busybox-kmodUpgrade busybox-netcatUpgrade busybox-cpioUpgrade busybox-warewulf3Upgrade busybox-attrUpgrade busybox-lessUpgrade busybox-util-linuxUpgrade busybox-bind-utilsUpgrade busybox-diffutilsUpgrade busybox-bcUpgrade busybox-tarUpgrade busybox-sysvinit-toolsUpgrade busybox-iproute2Upgrade busybox-kbdUpgrade busybox-shUpgrade busybox-grepUpgrade busybox-linksUpgrade busybox-unzipUpgrade busybox-vlanUpgrade busybox-psmiscUpgrade busybox-manUpgrade busybox-ncurses-utilsUpgrade busybox-sendmailUpgrade busybox-procpsUpgrade busybox-gzipUpgrade busybox-tunctlUpgrade busybox-sedUpgrade busybox-xzUpgrade busybox-staticUpgrade busybox-dos2unixUpgrade busybox-adduserUpgrade busybox-whichUpgrade busybox-timeUpgrade busybox-syslogdUpgrade busybox-viUpgrade busybox-bzip2Upgrade busybox-policycoreutilsUpgrade busybox-net-toolsUpgrade busybox-gawkUpgrade busyboxUpgrade busybox-hostnameUpgrade busybox-whoisUpgrade busybox-ed | Dec 2, 2022 | May 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub