CVE:CVE-2021-42374
CNNVD:CNNVD-202111-1239
BusyBox是乌克兰Denis Vlasenko个人开发者的一套包含了多个linux命令和工具的应用程序。
Busybox unlzma applet 存在缓冲区错误漏洞，该漏洞源于Busybox的unlzma applet中的越界堆读取会导致信息泄漏和在解压缩lzma压缩输入时拒绝服务。
solution:Upgrade busybox busybox to a higher version than 1.33.1,and avoid the version [1.27.0,1.33.1]; Upgrade fedoraproject fedora to a higher version than 33,34,and avoid the version 33,34; Upgrade netapp cloud_backup to a higher version than -; Upgrade netapp hci_management_node to a higher version than -; Upgrade netapp solidfire to a higher version than -; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h300e_firmware to a higher version than -; Upgrade netapp h500e_firmware to a higher version than -; Upgrade netapp h700e_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -