CVE-2023-42364

Name of the Vulnerable Software and Affected Versions BusyBox version 1.36.1

Description The issue is related to a use-after-free vulnerability in the evaluate function of the awk.c file in the BusyBox set of UNIX utilities. This vulnerability can be exploited by attackers to cause a denial of service via a crafted awk pattern.

Recommendations For BusyBox version 1.36.1, consider disabling the evaluate function in the awk.c file as a temporary workaround until a patch is available. Restrict access to the awk utility to minimize the risk of exploitation.