A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade busybox | Mar 26, 2024 | May 18, 2022 |
| Amazon_linux | — | Upgrade busybox | Jul 20, 2023 | May 18, 2022 |
| Debian | — | No solution existsUpgrade busybox | May 15, 2025 | May 18, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade busybox-help | Nov 3, 2022 | May 18, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade busybox-help | Nov 15, 2022 | May 18, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 18, 2022 |
| Suse | — | Upgrade busybox-linksUpgrade busybox-cpioUpgrade busybox-iproute2Upgrade busybox-attrUpgrade busybox-telnetUpgrade busybox-warewulf3Upgrade busybox-kmodUpgrade busybox-grepUpgrade busybox-netcatUpgrade busybox-bind-utilsUpgrade busybox-lessUpgrade busybox-tftpUpgrade busybox-sysvinit-toolsUpgrade busybox-patchUpgrade busybox-bcUpgrade busybox-iputilsUpgrade busybox-unzipUpgrade busybox-sharutilsUpgrade busybox-kbdUpgrade busybox-wgetUpgrade busybox-diffutilsUpgrade busybox-tracerouteUpgrade busybox-testsuiteUpgrade busybox-shUpgrade busybox-vlanUpgrade busybox-tarUpgrade busybox-coreutilsUpgrade busybox-miscUpgrade busybox-selinux-toolsUpgrade busybox-util-linuxUpgrade busybox-findutilsUpgrade busybox-manUpgrade busybox-policycoreutilsUpgrade busybox-psmiscUpgrade busybox-viUpgrade busybox-staticUpgrade busybox-adduserUpgrade busybox-sedUpgrade busybox-xzUpgrade busybox-tunctlUpgrade busybox-ncurses-utilsUpgrade busybox-gawkUpgrade busyboxUpgrade busybox-dos2unixUpgrade busybox-whichUpgrade busybox-sendmailUpgrade busybox-procpsUpgrade busybox-gzipUpgrade busybox-bzip2Upgrade busybox-syslogdUpgrade busybox-whoisUpgrade busybox-timeUpgrade busybox-hostnameUpgrade busybox-edUpgrade busybox-net-tools | Dec 2, 2022 | May 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub