Logo
vulnerabilityCVE-2023-42365
Name
CVE-2023-42365
Source
NVD ( link)Debian ( link)
Description
A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
busybox
Patched

Vulnerability Rating#


5.5
CVSSv31

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
1.37.0
Not Affected
buildroot
master
1.38.0
Not Affected
openwrt
master
1.38.0-r2
Not Affected
openwrt
openwrt-25.12
1.37.0-r6
Not Affected
yocto
kirkstone
1.35.0
Patched
yocto
master
1.38.0
Not Affected

Resolved with patches#


busybox (yocto:kirkstone)

#
Title
Author
Resolve
1
awk: fix precedence of = relative to ==
Denys Vlasenko <vda.linux@googlemail.com>
CVE-2023-42364
CVE-2023-42365
2
awk: fix ternary operator and precedence of =
Natanael Copa <ncopa@alpinelinux.org>
CVE-2023-42364
CVE-2023-42365

busybox (yocto:scarthgap)

#
Title
Author
Resolve
1
awk: fix precedence of = relative to ==
Denys Vlasenko <vda.linux@googlemail.com>
CVE-2023-42364
CVE-2023-42365
2
awk: fix ternary operator and precedence of =
Natanael Copa <ncopa@alpinelinux.org>
CVE-2023-42364
CVE-2023-42365