{"id":"CVE-2022-30065","aliases":["ALPINE-CVE-2022-30065","AZL-9815","BELL-CVE-2022-30065","DEBIAN-CVE-2022-30065","EUVD-2022-35279","GHSA-gq73-rh3m-3php","MGASA-2022-0458","OESA-2022-1859","SUSE-SU-2022:4309-1","SUSE-SU-2022:4371-1","SUSE-SU-2022:4372-1","openSUSE-SU-2024:12536-1"],"status":"published","title":"A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code...","description":"A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01254,"percentile":0.6972,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2022-05-18T00:00:00Z","modified":"2026-11-03T08:02:12Z","fixes":[{"ecosystem":"Alpine:v3.13","package":"busybox","fixed_in":["1.32.1-r9"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"busybox","fixed_in":["1.33.0-r8"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"busybox","fixed_in":["1.34.0-r6"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"busybox","fixed_in":["1.35.0-r15"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"busybox","fixed_in":["1.35.0-r17"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"busybox","fixed_in":["1.35.0-r17"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"busybox","fixed_in":["1.35.0-r17"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"busybox","fixed_in":["1.35.0-r17"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"busybox","fixed_in":["1.35.0-r17"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"busybox","fixed_in":["1.35.0-r17"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"busybox","fixed_in":["1.35.0-r17"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"busybox","fixed_in":["1.35.0-r17"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"busybox","fixed_in":["1.35.0-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"busybox","fixed_in":["1:1.36.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"busybox","fixed_in":["1:1.36.1-1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"busybox","fixed_in":["1.34.1-1.2.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"busybox","fixed_in":["1.31.1-15.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"busybox","fixed_in":["1.31.1-13.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"busybox","fixed_in":["1.34.1-16.oe2203"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"busybox","fixed_in":["1.35.0-150000.4.17.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"busybox","fixed_in":["1.35.0-150000.4.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"busybox","fixed_in":["1.35.0-4.6.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"busybox","fixed_in":["1.35.0-4.6.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"busybox","fixed_in":["1.35.0-9.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.13","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.32.1-r9"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.33.0-r8"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.34.0-r6"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-r15"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-r17"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-r17"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-r17"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-r17"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-r17"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-r17"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-r17"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-r17"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-3"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.35.0-4","1:1.35.0-4+deb12u1","1:1.36.0-1~exp1","1:1.36.1-1","1:1.36.1-2","1:1.36.1-3","1:1.36.1-3.1","1:1.36.1-4","1:1.36.1-5","1:1.36.1-6","1:1.36.1-6~exp.1","1:1.36.1-7","1:1.36.1-8","1:1.36.1-9","1:1.37.0-1","1:1.37.0-10","1:1.37.0-10.1","1:1.37.0-2","1:1.37.0-3","1:1.37.0-4","1:1.37.0-5","1:1.37.0-6","1:1.37.0-7","1:1.37.0-8","1:1.37.0-9","1:1.38.0-1","1:1.38.0-2","1:1.38.0-3"]},{"source":"osv","ecosystem":"Debian:13","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.36.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.36.1-1"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.34.1-1.2.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.31.1-15.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.31.1-13.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.34.1-16.oe2203"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150000.4.17.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150000.4.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150400.3.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150400.3.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"busybox-links","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-150400.4.3.14"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-4.6.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-4.6.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"busybox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35.0-9.1"}]}]}],"products":[{"vendor":"busybox","product":"busybox"},{"vendor":"siemens","product":"scalance_sc622-2c_firmware"},{"vendor":"siemens","product":"scalance_sc626-2c_firmware"},{"vendor":"siemens","product":"scalance_sc632-2c_firmware"},{"vendor":"siemens","product":"scalance_sc636-2c_firmware"},{"vendor":"siemens","product":"scalance_sc642-2c_firmware"},{"vendor":"siemens","product":"scalance_sc646-2c_firmware"}],"references":[{"url":"https://bugs.busybox.net/show_bug.cgi?id=14781","tags":["x_transferred","Exploit","Issue Tracking","Third Party Advisory","web"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf","tags":["x_transferred","Third Party Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30065","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-gq73-rh3m-3php"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-30065","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-30065","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/30xxx/CVE-2022-30065.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-30065","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0458.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31213","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DKNA5SMED6RSG7MVWBN6FWMQ4CMCW3HM/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1859","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20224309-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1199744","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-30065","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20224371-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/914660","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9645","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20224372-1/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-30065","description":"A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.","status":"published","published":"2022-05-18T00:00:00Z","modified":"2026-07-07T18:25:51.824Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:34:30.842561Z"}],"euvd":[{"id":"EUVD-2022-35279","description":"A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.","status":"published","published":"2022-05-18T00:00:00Z","modified":"2026-07-07T18:25:51Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T18:20:11.442824Z"}],"ghsa":[{"id":"GHSA-gq73-rh3m-3php","title":"A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code...","description":"A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.","status":"published","published":"2022-05-19T00:00:31Z","modified":"2023-01-29T05:03:30Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:45:19.964025Z"}],"nvd":[{"id":"CVE-2022-30065","description":"A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.","status":"published","published":"2022-05-18T15:15:10.24Z","modified":"2026-07-07T19:16:47.807Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:07:20.264424Z"}],"osv":[{"id":"ALPINE-CVE-2022-30065","description":"A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.","status":"published","published":"2022-05-18T15:15:10.24Z","modified":"2026-11-03T07:18:33.160203846Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:51:12.284675Z"},{"id":"AZL-9815","title":"CVE-2022-30065 affecting package busybox for versions less than 1.35.0-3","description":"A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.","status":"published","published":"2022-05-18T15:15:10Z","modified":"2026-04-21T04:35:08.389595Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:12.313414Z"},{"id":"BELL-CVE-2022-30065","title":"CVE-2022-30065 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:19.834573Z","modified":"2026-01-26T09:47:14.540434Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:17.151188Z"},{"id":"CVE-2022-30065","description":"A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.","status":"published","published":"2022-05-18T00:00:00Z","modified":"2026-10-28T02:31:05.859509149Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:25.516981Z"},{"id":"DEBIAN-CVE-2022-30065","description":"A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.","status":"published","published":"2022-05-18T15:15:10.24Z","modified":"2026-11-03T08:02:12.691533316Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T08:24:50.542442Z"},{"id":"OESA-2022-1859","title":"busybox security update","description":"BusyBox combines tiny versions of many common UNIX utilities into a single small executable. It provides replacements for most of the utilities you usually find in GNU fileutils, shellutils, etc. It provides a fairly complete environment for any small or embedded system.\r\n\r\nSecurity Fix(es):\r\n\r\nA use-after-free in Busybox 1.35-x\u0026apos;s awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.(CVE-2022-30065)","status":"published","published":"2022-08-26T11:05:08Z","modified":"2026-08-18T01:17:08.340002897Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"MGASA-2022-0458","title":"Updated busybox packages fix security vulnerability","description":"A use-after-free in Busybox 1.35-x's awk applet leads to denial of service\nand possibly code execution when processing a crafted awk pattern in the\ncopyvar function. (CVE-2022-30065)\n","status":"published","published":"2022-12-13T22:09:19Z","modified":"2026-04-16T04:42:41.093912171Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:12536-1","title":"busybox-1.35.0-9.1 on GA media","description":"These are all security issues fixed in the busybox-1.35.0-9.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:26:04.540797Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"SUSE-SU-2022:4309-1","title":"Security update for busybox","description":"This update for busybox fixes the following issues:\n\n- CVE-2022-30065: Fixed use-after-free in the AWK applet (bsc#1199744).\n","status":"published","published":"2022-12-01T19:42:15Z","modified":"2026-02-04T04:13:06.912663Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2022:4371-1","title":"Security update for busybox","description":"This update for busybox fixes the following issues:\n\n- CVE-2022-30065: Fixed use-after-free in the AWK applet (bsc#1199744). \n- CVE-2014-9645: Fixed loading of unwanted module with / in module names (bsc#914660).\n\n- Update to 1.35.0 also introduced:\n  - awk: fix printf %%, fix read beyond end of buffer\n  - chrt: silence analyzer warning\n  - libarchive: remove duplicate forward declaration\n  - mount: 'mount -o rw ....' should not fall back to RO mount\n  - ps: fix -o pid=PID,args interpreting entire 'PID,args' as header\n  - tar: prevent malicious archives with long name sizes causing OOM\n  - udhcpc6: fix udhcp_find_option to actually find DHCP6 options\n  - xxd: fix -p -r\n  - support for new optoins added to basename, cpio, date, find, \n    mktemp, wget and others\n","status":"published","published":"2022-12-08T16:19:54Z","modified":"2026-02-04T04:22:58.818215Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2022:4372-1","title":"Security update for busybox","description":"This update for busybox fixes the following issues:\n\n- CVE-2022-30065: Fixed use-after-free in the AWK applet (bsc#1199744).\n","status":"published","published":"2022-12-08T16:20:13Z","modified":"2026-02-04T02:32:20.50064Z","updated_at":"2026-11-02T15:53:51.853735Z"}]}}