CVE-2023-42365

Name of the Vulnerable Software and Affected Versions BusyBox version 1.36.1

Description A use-after-free issue was found in the copyvar function of the awk.c file in BusyBox. This issue can be triggered by a crafted awk pattern, potentially allowing an attacker to execute arbitrary code.

Recommendations For BusyBox version 1.36.1, consider disabling the copyvar function in the awk.c file as a temporary workaround until a patch is available. Restrict the use of crafted awk patterns to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.