CVE-2023-42365

MEDIUM

BusyBox 1.36.1 - Use-After-Free in awk.c copyvar Function

Title source: llm

A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function.

Core 2

Core References

Exploit, Issue Tracking, Vendor Advisory

Mailing List

CVSS v3 5.5

EPSS 0.0040

EPSS Percentile 31.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE

CWE-416

Status published

Products (1)

busybox/busybox 1.36.1

Published Nov 27, 2023

Tracked Since Feb 18, 2026