Vulnerabilities > CVE-2021-28831 - Improper Handling of Exceptional Conditions vulnerability in multiple products

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
busybox
fedoraproject
debian
CWE-755
NVD
Published: 2021-03-19
Updated: 2024-11-21

Summary

decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.

Vulnerable Configurations

Part Description Count
Application
Busybox
2
OS
Fedoraproject
3
OS
Debian
1

Common Weakness Enumeration (CWE)

References