CVE:CVE-2021-42373
CNNVD:CNNVD-202111-1232
BusyBox是乌克兰Denis Vlasenko个人开发者的一套包含了多个linux命令和工具的应用程序。
Busybox 中存在代码问题漏洞，该漏洞源于产品的man applet对某些输入数据未进行合适的处理。攻击者可通过提供section的同时不提page参数导致NULL指针解引用引发拒绝服务。以下产品及版本受到影响：Busybox 1.33.0 至 1.33.1 版本。
solution:Upgrade busybox busybox to a higher version than 1.33.0,1.33.1,and avoid the version 1.33.0,1.33.1; Upgrade fedoraproject fedora to a higher version than 33,34,and avoid the version 33,34; Upgrade netapp cloud_backup to a higher version than -; Upgrade netapp hci_management_node to a higher version than -; Upgrade netapp solidfire to a higher version than -; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h300e_firmware to a higher version than -; Upgrade netapp h500e_firmware to a higher version than -; Upgrade netapp h700e_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -