CVE-2023-42366

Publication date 27 November 2023

Last updated 20 October 2025

Ubuntu priority

Cvss 3 Severity Score

A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159.

Show unmaintained releases

Package	Ubuntu Release	Status
busybox	25.10 questing	Vulnerable, fix deferred
	25.04 plucky	Vulnerable, fix deferred
	24.10 oracular	Ignored end of life, was deferred [2025-10-20]
	24.04 LTS noble	Vulnerable, fix deferred
	23.10 mantic	Ignored end of life, was deferred [2024-09-19]
	23.04 lunar	Ignored end of life, was deferred [2024-09-19]
	22.04 LTS jammy	Vulnerable, fix deferred
	20.04 LTS focal	Vulnerable, fix deferred
	18.04 LTS bionic	Vulnerable, fix deferred
	16.04 LTS xenial	Vulnerable, fix deferred
	14.04 LTS trusty	Vulnerable, fix deferred

as of 2025-10-20, there is no fix from upstream for this issue