Use-After-Free Vulnerability in Busybox Awk Applet

CVE-2021-42380

What is CVE-2021-42380?

A use-after-free vulnerability exists in the awk applet of Busybox, triggered by processing a specially crafted awk pattern in the clrvar function. This exploit can lead to a denial of service, and potentially enable arbitrary code execution, allowing an attacker to compromise system integrity. Users and administrators are urged to update to the latest version of Busybox to mitigate such risks.

References