Medium severity5.5NVD Advisory· Published Nov 27, 2023· Updated Oct 8, 2026
CVE-2023-42366
CVE-2023-42366
Description
A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.
Affected products
9- osv-coords6 versionspkg:apk/chainguard/busyboxpkg:apk/chainguard/busybox-fullpkg:apk/wolfi/busyboxpkg:apk/wolfi/busybox-fullpkg:rpm/opensuse/busybox&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/busybox&distro=openSUSE%20Tumbleweed
< 0+ 5 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 1.37.0-160000.7.1
- (no CPE)range: < 1.38.0-2.1
Patches
Vulnerability mechanics
References
2- bugs.busybox.net/show_bug.cginvdExploitIssue TrackingVendor Advisory
- security.netapp.com/advisory/ntap-20241206-0007/nvd
News mentions
0No linked articles in our index yet.