Logo
vulnerabilityCVE-2023-42366
Name
CVE-2023-42366
Source
NVD ( link)Debian ( link)
Description
A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
busybox
Patched

Vulnerability Rating#


5.5
CVSSv31

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
1.37.0
Not Affected
buildroot
master
1.38.0
Not Affected
openwrt
master
1.38.0-r2
Not Affected
openwrt
openwrt-25.12
1.37.0-r6
Not Affected
yocto
kirkstone
1.35.0
Patched
yocto
master
1.38.0
Not Affected

Resolved with patches#


busybox (buildroot:2025.02.x)

#
Title
Author
Resolve
1
awk.c: fix CVE-2023-42366 (bug #15874)
Valery Ushakov <uwe@stderr.spb.ru>
CVE-2023-42366

busybox (buildroot:master)

#
Title
Author
Resolve
1
awk.c: fix CVE-2023-42366 (bug #15874)
Valery Ushakov <uwe@stderr.spb.ru>
CVE-2023-42366

busybox (yocto:kirkstone)

#
Title
Author
Resolve
1
awk.c: fix CVE-2023-42366 (bug #15874)
Valery Ushakov <uwe@stderr.spb.ru>
CVE-2023-42366

busybox (yocto:scarthgap)

#
Title
Author
Resolve
1
awk.c: fix CVE-2023-42366 (bug #15874)
Valery Ushakov <uwe@stderr.spb.ru>
CVE-2023-42366