CVE-2021-42376CWE-476

A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted shell command, due to missing validation after a \x03…

published November 15, 2021

CVSS
—
EPSS
0%
Percentile
36.5
In the wild
Unconfirmed
What it is

A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted shell command, due to missing validation after a \x03 delimiter character. This may be used for DoS under very rare conditions of filtered command input.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00432 · 36.5th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2021-11-15T00:00Z
EPSS history
Timeline
  • 15 NOV 00:00Z
    A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted shell command, due to missing validation after a \x03…
    cvelistv5