CVE:CVE-2021-28831
CNNVD:CNNVD-202103-1217
BusyBox是乌克兰Denis Vlasenko个人开发者的一套包含了多个linux命令和工具的应用程序。
BusyBox through 1.32.1 存在安全漏洞，该漏洞源于错误地处理huft构建结果指针上的错误位，通过畸形的gzip数据导致无效的自由或分段错误。
solution:Upgrade busybox busybox to a higher version than 1.32.1,and avoid the version [1.32.0,1.32.1]; Upgrade fedoraproject fedora to a higher version than 32,33,34,and avoid the version 32,33,34; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0