tocsin

Alpine/busybox: medium 5.5

A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.

Action: Upgrade busybox to 1.35.0-r31 or later.

Affected

introducedfixedlast affected
01.35.0-r31-

Fixed versions

1.35.0-r31

Sources

published · modified · JSON