| Package | Affected versions | Patched versions |
|---|---|---|
| busybox | ≥ 1.32.0, ≤ 1.32.1 |
decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free