CVE-2021-42373

—

CVSS 3.1

5.5 medium

EPSS

<1%p34

Published

Nov 15, 2021 (Nov 15, 2021)

Modified

Jun 17, 2026

Description

A NULL pointer dereference in Busybox's man applet leads to denial of service when a section name is supplied but no page argument is given

Vendors: busybox fedoraproject netapp
Products: busybox, fedora, cloud backup, hci management node, solidfire, h300s firmware, h500s firmware, h700s firmware, h300e firmware, h500e firmware, h700e firmware, h410s firmware
Weakness: CWE-476
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news2 stories

Experts found 14 new flaws in BusyBox

Security AffairsNov 10, 11:38 UTC · Nov 10, 2021Vulnerability CVE-2021-42373 CVE-2021-42374 CVE-2021-42375+11 CVEs

60

14 New Security Flaws Found in BusyBox Linux Utility for Embedded Devices

The Hacker NewsNov 10, 08:08 UTC · Nov 10, 2021Vulnerability CVE-2021-42373 CVE-2021-42386 CVE-2021-42374+11 CVEs

60