CVE-2023-42366

Publication date 27 November 2023

Last updated 7 January 2025

Ubuntu priority

Cvss 3 Severity Score

A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.

Show unmaintained releases

Package	Ubuntu Release	Status
busybox	24.10 oracular	Vulnerable, fix deferred
	24.04 LTS noble	Vulnerable, fix deferred
	23.10 mantic	Ignored end of life, was deferred [2024-09-19]
	23.04 lunar	Ignored end of life, was deferred [2024-09-19]
	22.04 LTS jammy	Vulnerable, fix deferred
	20.04 LTS focal	Vulnerable, fix deferred
	18.04 LTS bionic	Vulnerable, fix deferred
	16.04 LTS xenial	Vulnerable, fix deferred
	14.04 LTS trusty	Ignored end of ESM support, was deferred [2025-01-07]

as of 2025-01-07, there is no fix from upstream for this issue