Security Advisory

CVE-2021-42376

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-11-15 00:00:00
Last updated 2024-08-04 03:30:38
Assigner JFROG
State PUBLISHED

Description

A NULL pointer dereference in Busyboxs hush applet leads to denial of service when processing a crafted shell command, due to missing validation after a x03 delimiter character. This may be used for DoS under very rare conditions of filtered command input.