A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade busybox | Mar 26, 2024 | May 18, 2022 |
| Amazon_linux | — | Upgrade busybox | Jul 20, 2023 | May 18, 2022 |
| Debian | — | Upgrade busyboxNo solution exists | May 15, 2025 | May 18, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade busybox-help | Nov 3, 2022 | May 18, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade busybox-help | Nov 15, 2022 | May 18, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 18, 2022 |
| Suse | — | Upgrade busybox-tunctlUpgrade busybox-staticUpgrade busybox-xzUpgrade busybox-ncurses-utilsUpgrade busybox-psmiscUpgrade busybox-sedUpgrade busybox-whichUpgrade busybox-sendmailUpgrade busybox-procpsUpgrade busyboxUpgrade busybox-dos2unixUpgrade busybox-gzipUpgrade busybox-net-toolsUpgrade busybox-policycoreutilsUpgrade busybox-gawkUpgrade busybox-viUpgrade busybox-hostnameUpgrade busybox-timeUpgrade busybox-edUpgrade busybox-bzip2Upgrade busybox-adduserUpgrade busybox-syslogdUpgrade busybox-whoisUpgrade busybox-manUpgrade busybox-sharutilsUpgrade busybox-warewulf3Upgrade busybox-iproute2Upgrade busybox-unzipUpgrade busybox-netcatUpgrade busybox-kmodUpgrade busybox-vlanUpgrade busybox-grepUpgrade busybox-bind-utilsUpgrade busybox-testsuiteUpgrade busybox-util-linuxUpgrade busybox-sysvinit-toolsUpgrade busybox-tftpUpgrade busybox-bcUpgrade busybox-shUpgrade busybox-patchUpgrade busybox-cpioUpgrade busybox-tarUpgrade busybox-linksUpgrade busybox-kbdUpgrade busybox-iputilsUpgrade busybox-diffutilsUpgrade busybox-lessUpgrade busybox-attrUpgrade busybox-telnetUpgrade busybox-miscUpgrade busybox-coreutilsUpgrade busybox-selinux-toolsUpgrade busybox-wgetUpgrade busybox-tracerouteUpgrade busybox-findutils | Dec 2, 2022 | May 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub