Back to search
CVE-2021-42374
Published: Nov 15, 2021
Modified: Nov 3, 2025
PUBLISHED
Description
An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that
| Vendor | Product | Versions |
|---|---|---|
busybox | busybox | affected unspecified - < 1.34.0 |
Weaknesses (CWE)
References
FEDORA-2021-5a95823596
vendor-advisory
FEDORA-2021-c52c0fe490
vendor-advisory
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now