A NULL pointer dereference in... CVE-2021-42376

1.9 AV AC AU C I A
发布: 2021-11-15
修订: 2021-12-23

A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted shell command, due to missing validation after a \x03 delimiter character. This may be used for DoS under very rare conditions of filtered command input.