CVE:CVE-2022-30065
CNNVD:CNNVD-202205-3676
BusyBox是乌克兰Denis Vlasenko个人开发者的一套包含了多个linux命令和工具的应用程序。
BusyBox 1.35.x版本存在安全漏洞，该漏洞源于系统awk小工具中的copyvar函数存在释放后重用漏洞。攻击者利用该漏洞可以实现拒绝服务或代码执行。
solution:Upgrade busybox busybox to a higher version than 1.35.0,and avoid the version 1.35.0; Upgrade siemens scalance_sc622-2c_firmware to a higher version than 3.0,and avoid the version (,3.0); Upgrade siemens scalance_sc626-2c_firmware to a higher version than 3.0,and avoid the version (,3.0); Upgrade siemens scalance_sc632-2c_firmware to a higher version than 3.0,and avoid the version (,3.0); Upgrade siemens scalance_sc636-2c_firmware to a higher version than 3.0,and avoid the version (,3.0); Upgrade siemens scalance_sc642-2c_firmware to a higher version than 3.0,and avoid the version (,3.0); Upgrade siemens scalance_sc646-2c_firmware to a higher version than 3.0,and avoid the version (,3.0)