2021-11-15 00:00:00
JFROG
PUBLISHED
A NULL pointer dereference in Busyboxs hush applet leads to denial of service when processing a crafted shell command, due to missing validation after a x03 delimiter character. This may be used for DoS under very rare conditions of filtered command input.