CVE-2021-42374

Related Vulnerabilities: CVE-2021-42374  

An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that

Description

The MITRE CVE dictionary describes this issue as:

An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that

Additional Information

  • Bugzilla 2023881: CVE-2021-42374 busybox: out-of-bounds read in unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed
  • CWE-125: Out-of-bounds Read
  • FAQ: Frequently asked questions about CVE-2021-42374