---

CVE-2021-42376 - log back

CVE-2021-42376 created at 16 Nov 2021 12:22:10
Severity	+ Medium
Remote	+ Remote
Type	+ Denial of service
Description	+ A NULL pointer dereference in Busybox's hush applet before version 1.34.0 leads to denial of service when processing a crafted shell command, due to missing validation after a \x03 delimiter character. This may be used for DoS under very rare conditions of filtered command input.
References	+ https://jfrog.com/blog/unboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog/
Notes