CVE-2022-30065

A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 68%
VendorProductVersion
busyboxbusybox
1.35.0
siemensscalance_sc622-2c_firmware
𝑥
< 3.0
siemensscalance_sc626-2c_firmware
𝑥
< 3.0
siemensscalance_sc632-2c_firmware
𝑥
< 3.0
siemensscalance_sc636-2c_firmware
𝑥
< 3.0
siemensscalance_sc642-2c_firmware
𝑥
< 3.0
siemensscalance_sc646-2c_firmware
𝑥
< 3.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
busybox
bullseye
unimportant
bookworm
unimportant
sid
1:1.37.0-4
fixed
trixie
1:1.37.0-4
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
busybox
jammy
not-affected
impish
not-affected
focal
not-affected
bionic
not-affected
xenial
not-affected
trusty
not-affected