← Database

CVE-2021-42374

MEDIUM CVSS: 5.3 Published: 2021-11-15 Modified: 2026-06-17

Description

An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that

Affected Platforms

Netapp SolidfireNetapp Hci Management NodeNetapp H300S FirmwareNetapp H700E FirmwareNetapp H700SNetapp H410SNetapp H410S FirmwareNetapp H300SBusybox BusyboxNetapp Cloud Backup

Weakness Type

CWE-125, CWE-125

References