Wind River Support Network

HomeDefectsLIN1024-231

Fixed

LIN1024-231 : Security Advisory - busybox - CVE-2023-42364

Created: Apr 29, 2024 Updated: Oct 23, 2024

Resolved Date: Sep 29, 2024

Found In Version: 10.24.33.1

Fix Version: 10.24.33.3

Severity: Standard

Applicable for: Wind River Linux LTS 24

Component/s: Userspace

Description

A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function.

CVEs

CVE-2023-42364