NULL Pointer Dereference Vulnerability in Busybox's Hush Applet

CVE-2021-42376

What is CVE-2021-42376?

A NULL pointer dereference vulnerability in the hush applet of Busybox can lead to a denial of service when processing specially crafted shell commands. This issue arises due to the lack of sufficient validation following a specific delimiter character, potentially allowing an attacker to disrupt service under rare conditions where command input is filtered. Administrators should ensure they are using the latest, patched version of Busybox to mitigate this vulnerability.

References