CVE-2021-42373
- EPSS 0.08%
- Veröffentlicht 15.11.2021 21:15:07
- Zuletzt bearbeitet 21.11.2024 06:27:41
A NULL pointer dereference in Busybox's man applet leads to denial of service when a section name is supplied but no page argument is given
CVE-2021-42374
- EPSS 0.07%
- Veröffentlicht 15.11.2021 21:15:07
- Zuletzt bearbeitet 05.05.2025 17:17:27
An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that
CVE-2021-42375
- EPSS 0.06%
- Veröffentlicht 15.11.2021 21:15:07
- Zuletzt bearbeitet 23.04.2025 20:15:33
An incorrect handling of a special element in Busybox's ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditi...
CVE-2021-42376
- EPSS 0.05%
- Veröffentlicht 15.11.2021 21:15:07
- Zuletzt bearbeitet 21.11.2024 06:27:41
A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted shell command, due to missing validation after a \x03 delimiter character. This may be used for DoS under very rare conditions of filtered comman...
CVE-2021-42377
- EPSS 1.86%
- Veröffentlicht 15.11.2021 21:15:07
- Zuletzt bearbeitet 21.11.2024 06:27:41
An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafted shell command, due to the shell mishandling the &&& string. This may be used for remote code execution under...
CVE-2021-35603
- EPSS 0.12%
- Veröffentlicht 20.10.2021 11:17:05
- Zuletzt bearbeitet 21.11.2024 06:12:37
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Difficult ...
- EPSS 0.15%
- Veröffentlicht 20.10.2021 11:16:59
- Zuletzt bearbeitet 21.11.2024 06:12:35
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily ...
CVE-2021-35588
- EPSS 0.09%
- Veröffentlicht 20.10.2021 11:16:59
- Zuletzt bearbeitet 21.11.2024 06:12:35
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 7u311, 8u301; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Difficult to exploit...
- EPSS 0.13%
- Veröffentlicht 20.10.2021 11:16:55
- Zuletzt bearbeitet 21.11.2024 06:12:34
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitabl...
CVE-2021-35567
- EPSS 0.29%
- Veröffentlicht 20.10.2021 11:16:38
- Zuletzt bearbeitet 15.08.2025 20:23:58
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily explo...