CVE:CVE-2021-42377
CNNVD:CNNVD-202111-1240
BusyBox是乌克兰Denis Vlasenko个人开发者的一套包含了多个linux命令和工具的应用程序。
Busybox hush applet 存在安全漏洞，该漏洞源于在Busybox的hush applet中shell错误地处理&&&字符串。攻击者可利用该漏洞导致拒绝服务和可能的代码执行。
solution:Upgrade busybox busybox to a higher version than 1.33.0,1.33.1,and avoid the version 1.33.0,1.33.1; Upgrade fedoraproject fedora to a higher version than 33,34,and avoid the version 33,34; Upgrade netapp cloud_backup to a higher version than -; Upgrade netapp hci_management_node to a higher version than -; Upgrade netapp solidfire to a higher version than -; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h300e_firmware to a higher version than -; Upgrade netapp h500e_firmware to a higher version than -; Upgrade netapp h700e_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -