CVE-2023-42366

Name of the Vulnerable Software and Affected Versions BusyBox version 1.36.1

Description A heap-buffer-overflow issue was discovered in the next token function at awk.c:1159. This issue is related to writing beyond the buffer boundaries. Exploitation of this issue may allow an attacker to cause a denial of service.

Recommendations For BusyBox version 1.36.1, as a temporary workaround, consider disabling the next token function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.