[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fG6fvr4CAMoP9TIUGAsI2HgJiLEkmtbor_kMSqn98mCE":3,"g5a-risk:CVE-2021-42377":281},{"success":4,"data":5,"meta":279},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":27,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":112,"references":113,"referencesCount":134,"weaknesses":135,"weaknessesCount":150,"isActivelyExploited":151,"cisaInfo":27,"otxData":27,"relatedBlogPosts":152,"seoMetadata":153,"configurations":178,"relatedVendorCves":277,"notableEvents":278},"CVE-2021-42377","What is CVE-2021-42377?","An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafted shell command, due to the shell mishandling the &&& string. This may be used for remote code execution under rare conditions of filtered command input.","An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafted shell command, ...","2021-11-15T21:15:07.7","2023-11-07T03:39:10.153",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":35,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":35,"Authentication":23,"ConfidentialityImpact":36,"IntegrityImpact":36,"AvailabilityImpact":36,"BaseScore":37,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",6.8,8.6,6.4,0.03615,[40,40,40,40,40,40,40],"Critical",[44,48,51,56,59,64,67,70,73,76,79,82,85,88,91,94,97,100,103,106,109],{"vendor":45,"product":45,"version":46,"criteria":47,"vulnerable":4},"busybox","1.33.0","cpe:2.3:a:busybox:busybox:1.33.0:*:*:*:*:*:*:*",{"vendor":45,"product":45,"version":49,"criteria":50,"vulnerable":4},"1.33.1","cpe:2.3:a:busybox:busybox:1.33.1:*:*:*:*:*:*:*",{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"fedoraproject","fedora","33","cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",{"vendor":52,"product":53,"version":57,"criteria":58,"vulnerable":4},"34","cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",{"vendor":60,"product":61,"version":62,"criteria":63,"vulnerable":4},"netapp","cloud_backup","-","cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",{"vendor":60,"product":65,"version":62,"criteria":66,"vulnerable":4},"hci_management_node","cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*",{"vendor":60,"product":68,"version":62,"criteria":69,"vulnerable":4},"solidfire","cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*",{"vendor":60,"product":71,"version":62,"criteria":72,"vulnerable":4},"h300s_firmware","cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*",{"vendor":60,"product":74,"version":62,"criteria":75,"vulnerable":4},"h300s","cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*",{"vendor":60,"product":77,"version":62,"criteria":78,"vulnerable":4},"h500s_firmware","cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*",{"vendor":60,"product":80,"version":62,"criteria":81,"vulnerable":4},"h500s","cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*",{"vendor":60,"product":83,"version":62,"criteria":84,"vulnerable":4},"h700s_firmware","cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*",{"vendor":60,"product":86,"version":62,"criteria":87,"vulnerable":4},"h700s","cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*",{"vendor":60,"product":89,"version":62,"criteria":90,"vulnerable":4},"h300e_firmware","cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*",{"vendor":60,"product":92,"version":62,"criteria":93,"vulnerable":4},"h300e","cpe:2.3:h:netapp:h300e:-:*:*:*:*:*:*:*",{"vendor":60,"product":95,"version":62,"criteria":96,"vulnerable":4},"h500e_firmware","cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*",{"vendor":60,"product":98,"version":62,"criteria":99,"vulnerable":4},"h500e","cpe:2.3:h:netapp:h500e:-:*:*:*:*:*:*:*",{"vendor":60,"product":101,"version":62,"criteria":102,"vulnerable":4},"h700e_firmware","cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*",{"vendor":60,"product":104,"version":62,"criteria":105,"vulnerable":4},"h700e","cpe:2.3:h:netapp:h700e:-:*:*:*:*:*:*:*",{"vendor":60,"product":107,"version":62,"criteria":108,"vulnerable":4},"h410s_firmware","cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*",{"vendor":60,"product":110,"version":62,"criteria":111,"vulnerable":4},"h410s","cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*",21,[114,118,123,127,130],{"url":115,"source":116,"tags":117},"https:\u002F\u002Fclaroty.com\u002Fteam82\u002Fresearch\u002Funboxing-busybox-14-vulnerabilities-uncovered-by-claroty-jfrog","Claroty",[],{"url":119,"source":120,"tags":121},"https:\u002F\u002Fjfrog.com\u002Fblog\u002Funboxing-busybox-14-new-vulnerabilities-uncovered-by-claroty-and-jfrog\u002F","Jfrog",[122],"Third Party Advisory",{"url":124,"source":125,"tags":126},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002F6T2TURBYYJGBMQTTN2DSOAIQGP7WCPGV\u002F","Fedoraproject",[],{"url":128,"source":125,"tags":129},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FUQXGOGWBIYWOIVXJVRKHZR34UMEHQBXS\u002F",[],{"url":131,"source":132,"tags":133},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20211223-0002\u002F","Netapp",[122],5,[136,144],{"id":137,"name":138,"description":139,"extendedDescription":140,"status":141,"abstraction":142,"structure":143},"CWE-590","Free of Memory not on the Heap","The product calls free() on a pointer to memory that was not allocated using associated heap allocation functions such as malloc(), calloc(), or realloc().","When free() is called on an invalid pointer, the program's memory management data structures may become corrupted. This corruption can cause the program to crash or, in some circumstances, an attacker may be able to cause free() to operate on controllable memory locations to modify critical program variables or execute code.","Incomplete","Variant","Simple",{"id":145,"name":146,"description":147,"extendedDescription":148,"status":141,"abstraction":149,"structure":143},"CWE-763","Release of Invalid Pointer or Reference","The product attempts to return a memory resource to the system, but it calls the wrong release function or calls the appropriate release function incorrectly.","This weakness can take several forms, such as:","Base",2,false,[],{"title":154,"metaDescription":155,"keywords":156,"canonicalUrl":157,"structuredData":158},"What is CVE-2021-42377? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-42377, a critical severity cyber security vulnerability from 2021. An attacker-controlled pointer free in Busybox's hush a...","CVE-2021-42377, CVE-2021-42377 vulnerability, CVE-2021-42377 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, busybox security, fedoraproject security, netapp security, busybox vulnerability, fedora vulnerability, cloud_backup vulnerability, hci_management_node vulnerability, solidfire vulnerability","\u002Fwhat-is\u002Fcve-2021-42377",{"@context":159,"@type":160,"headline":154,"description":155,"datePublished":10,"dateModified":11,"author":161,"publisher":165,"about":169,"mainEntityOfPage":173,"articleSection":176,"keywords":177},"https:\u002F\u002Fschema.org","TechArticle",{"@type":162,"name":163,"url":164},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":162,"name":163,"url":164,"logo":166},{"@type":167,"url":168},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":170,"name":6,"description":171,"additionalType":172},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":174,"@id":175},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-42377","Cybersecurity","CVE-2021-42377, CVE-2021-42377 vulnerability, CVE-2021-42377 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[179,188,196,206,217,227,237,247,257,267],{"Operator":27,"Negate":27,"Nodes":180},[181],{"Operator":182,"Negate":27,"CPEMatch":183},"OR",[184,186],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":185,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"2A337F0B-E3EA-4176-A7D5-72FF7D4F9467",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":187,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"4E183752-159F-467F-9DCB-B7AED9DC2288",{"Operator":27,"Negate":27,"Nodes":189},[190],{"Operator":182,"Negate":27,"CPEMatch":191},[192,194],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":193,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"E460AA51-FCDA-46B9-AE97-E6676AA5E194",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":195,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A930E247-0B43-43CB-98FF-6CE7B8189835",{"Operator":27,"Negate":27,"Nodes":197},[198],{"Operator":182,"Negate":27,"CPEMatch":199},[200,202,204],{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":201,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"5C2089EE-5D7F-47EC-8EA5-0F69790564C4",{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":203,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A3C19813-E823-456A-B1CE-EC0684CE1953",{"Vulnerable":4,"Criteria":69,"MatchCriteriaID":205,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A6E9EF0C-AFA8-4F7B-9FDC-1E0F7C26E737",{"Operator":207,"Negate":27,"Nodes":208},"AND",[209,213],{"Operator":182,"Negate":27,"CPEMatch":210},[211],{"Vulnerable":4,"Criteria":72,"MatchCriteriaID":212,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"6770B6C3-732E-4E22-BF1C-2D2FD610061C",{"Operator":182,"Negate":27,"CPEMatch":214},[215],{"Vulnerable":27,"Criteria":75,"MatchCriteriaID":216,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"9F9C8C20-42EB-4AB5-BD97-212DEB070C43",{"Operator":207,"Negate":27,"Nodes":218},[219,223],{"Operator":182,"Negate":27,"CPEMatch":220},[221],{"Vulnerable":4,"Criteria":78,"MatchCriteriaID":222,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"7FFF7106-ED78-49BA-9EC5-B889E3685D53",{"Operator":182,"Negate":27,"CPEMatch":224},[225],{"Vulnerable":27,"Criteria":81,"MatchCriteriaID":226,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"E63D8B0F-006E-4801-BF9D-1C001BBFB4F9",{"Operator":207,"Negate":27,"Nodes":228},[229,233],{"Operator":182,"Negate":27,"CPEMatch":230},[231],{"Vulnerable":4,"Criteria":84,"MatchCriteriaID":232,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"56409CEC-5A1E-4450-AA42-641E459CC2AF",{"Operator":182,"Negate":27,"CPEMatch":234},[235],{"Vulnerable":27,"Criteria":87,"MatchCriteriaID":236,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"B06F4839-D16A-4A61-9BB5-55B13F41E47F",{"Operator":207,"Negate":27,"Nodes":238},[239,243],{"Operator":182,"Negate":27,"CPEMatch":240},[241],{"Vulnerable":4,"Criteria":90,"MatchCriteriaID":242,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"108A2215-50FB-4074-94CF-C130FA14566D",{"Operator":182,"Negate":27,"CPEMatch":244},[245],{"Vulnerable":27,"Criteria":93,"MatchCriteriaID":246,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"7AFC73CE-ABB9-42D3-9A71-3F5BC5381E0E",{"Operator":207,"Negate":27,"Nodes":248},[249,253],{"Operator":182,"Negate":27,"CPEMatch":250},[251],{"Vulnerable":4,"Criteria":96,"MatchCriteriaID":252,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"32F0B6C0-F930-480D-962B-3F4EFDCC13C7",{"Operator":182,"Negate":27,"CPEMatch":254},[255],{"Vulnerable":27,"Criteria":99,"MatchCriteriaID":256,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"803BC414-B250-4E3A-A478-A3881340D6B8",{"Operator":207,"Negate":27,"Nodes":258},[259,263],{"Operator":182,"Negate":27,"CPEMatch":260},[261],{"Vulnerable":4,"Criteria":102,"MatchCriteriaID":262,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"0FEB3337-BFDE-462A-908B-176F92053CEC",{"Operator":182,"Negate":27,"CPEMatch":264},[265],{"Vulnerable":27,"Criteria":105,"MatchCriteriaID":266,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"736AEAE9-782B-4F71-9893-DED53367E102",{"Operator":207,"Negate":27,"Nodes":268},[269,273],{"Operator":182,"Negate":27,"CPEMatch":270},[271],{"Vulnerable":4,"Criteria":108,"MatchCriteriaID":272,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"D0B4AD8A-F172-4558-AEC6-FF424BA2D912",{"Operator":182,"Negate":27,"CPEMatch":274},[275],{"Vulnerable":27,"Criteria":111,"MatchCriteriaID":276,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"8497A4C9-8474-4A62-8331-3FE862ED4098",[],[],{"lastModified":11,"cacheTime":280,"version":33},1792356508954,{"score":282,"band":283,"action":284,"scoredAt":285},56,"Medium","Plan remediation","2026-10-16T06:52:30.024032+00:00"]