Use-After-Free Vulnerability in Busybox's Awk Applet

CVE-2021-42386

What is CVE-2021-42386?

This vulnerability is a use-after-free issue found in the awk applet of Busybox, triggered when processing specially crafted awk patterns. The affected code in the nvalloc function could allow an attacker to disrupt the application, leading to a denial of service. In certain scenarios, this flaw may also be exploited to execute arbitrary code, posing a significant risk to systems utilizing this widely used utility. Users are encouraged to update their Busybox installations to mitigate potential threats.

References