← All advisories

Medium severity5.5NVD Advisory· Published Nov 27, 2023· Updated Jun 17, 2026

CVE-2023-42366

CVE-2023-42366

Description

A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.

Affected products

7

Busybox/Busybox3 versions
cpe:2.3:a:busybox:busybox:1.36.1:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:busybox:busybox:1.36.1:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: <=1.36.1
osv-coords4 versions
pkg:apk/chainguard/busybox pkg:apk/chainguard/busybox-full pkg:apk/wolfi/busybox pkg:apk/wolfi/busybox-full
< 0+ 3 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0

Patches

Vulnerability mechanics

References

2

bugs.busybox.net/show_bug.cginvdExploitIssue TrackingVendor Advisory
security.netapp.com/advisory/ntap-20241206-0007/nvd

News mentions

0

No linked articles in our index yet.