Msrc Cbl2 Busybox 1.32.0-2 On Cbl Mariner 2.0 vulnerabilities

1 known vulnerability affecting msrc/cbl2_busybox_1.32.0-2_on_cbl_mariner_2.0.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2021-28831HIGHCVSS 7.52021-03-09

CVE-2021-28831 [HIGH] CWE-755 decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer with a resultant invalid free or segmentation fault via malformed gzip data. decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer with a resultant invalid free or segmentation fault via malformed gzip data. FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore pote