An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafted shell command, due to the shell mishandling the &&& string. This may be used for remote code execution under rare conditions of filtered command input.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: JFROG
Published: 2021-11-15T00:00:00
Updated: 2023-04-25T00:00:00
Reserved: 2021-10-14T00:00:00
Link: CVE-2021-42377
JSON object: View
NVD Information
Status : Modified
Published: 2021-11-15T21:15:07.700
Modified: 2023-11-07T03:39:10.153
Link: CVE-2021-42377
JSON object: View
Redhat Information
No data.