tocsin

Alpine/busybox: high 7.8

A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.

Action: Upgrade busybox to 1.32.1-r9 or later.

Affected

introducedfixedlast affected
01.32.1-r9-

Fixed versions

1.32.1-r9

Sources

published · modified · JSON