CVE-2021-28831
HighAdvisory
Published 19 Mar 2021In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.027
- 85th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 38
- of 17,781 indexed, latest versions
- Container images
- 45
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
busybox - security update
Carried by container images the latest versions of 38 of 17,781 indexed charts deploy, on 45 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| busyboxapk | 1.32.1-r0, 1.32.1-r2, 1.32.1-r3 | 1.32.1-r4 | 32 |
| busyboxdeb | 1:1.21.0-1ubuntu1, 1:1.21.0-1ubuntu1.4, 1:1.22.0-19+b3 | 1:1.21.0-1ubuntu1.4+esm1, 1:1.22.0-19+deb9u2 | 13 |
- OSV records
- ALPINE-CVE-2021-28831UBUNTU-CVE-2021-28831DLA-2614-1
- Also known as
- USN-6335-1
Charts affected
38 by stars
Container images carrying it
45 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| library/ | 24b1579f6759 | busybox | 1.32.1-r4 | 3 |
| apteno/ | 74035b864eed | busybox | 1.32.1-r4 | 2 |
| maxrocketinternet/ | 85e5f55b6ddc | busybox | 1.32.1-r4 | 2 |
| wurstmeister/ | 7a7fd44a7210 | busybox | 1:1.21.0-1ubuntu1.4+esm1 | 2 |
| ghcr.io/ | 5e88f2205de1 | busybox | 1.32.1-r4 | 2 |
| acockburn/ | 3a93281d7e94 | busybox | 1.32.1-r4 | 1 |
| ajanvier/ | 91ac61b88c85 | busybox | 1.32.1-r4 | 1 |
| chetangautamm/ | b4b94155ff5a | busybox | 1:1.21.0-1ubuntu1.4+esm1 | 1 |
| contribsys/ | 5f9a23ee4e86 | busybox | 1.32.1-r4 | 1 |
| filebrowser/ | c5d0a75a0041 | busybox | 1.32.1-r4 | 1 |
| fluxcd/ | 92b891e495d8 | busybox | 1.32.1-r4 | 1 |
| fluxcd/ | 31a8c79a6803 | busybox | 1.32.1-r4 | 1 |
| galaxy/ | 0267bad550e6 | busybox | 1:1.21.0-1ubuntu1.4+esm1 | 1 |
| galaxy/ | 8e577a626dfd | busybox | 1:1.21.0-1ubuntu1.4+esm1 | 1 |
| hyperledger/ | f270dfeee91d | busybox | 1.32.1-r4 | 1 |
| julb/ | 837c4038a0dd | busybox | 1.32.1-r4 | 1 |
| jupyterhub/ | e562b1f91469 | busybox | 1.32.1-r4 | 1 |
| library/ | 143ec8cc2f3a | busybox | 1.32.1-r4 | 1 |
| mesosphere/ | 4fd8889195fe | busybox | 1.32.1-r4 | 1 |
| mirrorgitlabcontainers/ | 83599461ef8b | busybox | 1:1.22.0-19+deb9u2 | 1 |
| mirrorgitlabcontainers/ | 9f3654f1eafc | busybox | 1:1.22.0-19+deb9u2 | 1 |
| mirrorgitlabcontainers/ | 94d1431683fa | busybox | 1:1.22.0-19+deb9u2 | 1 |
| mirrorgitlabcontainers/ | 9efd73993c34 | busybox | 1:1.22.0-19+deb9u2 | 1 |
| mirrorgitlabcontainers/ | 30393f990f5c | busybox | 1:1.22.0-19+deb9u2 | 1 |
| mirrorgitlabcontainers/ | a6d7bf42805a | busybox | 1:1.22.0-19+deb9u2 | 1 |
| opsmx11/ | 5c50ca123d88 | busybox | 1:1.21.0-1ubuntu1.4+esm1 | 1 |
| phntom/ | 0c75ed6dd606 | busybox | 1.32.1-r4 | 1 |
| phntom/ | 5695f546abbb | busybox | 1.32.1-r4 | 1 |
| resouer/ | e2f198b49ba7 | busybox | 1:1.21.0-1ubuntu1.4+esm1 | 1 |
| taigaio/ | 4d367b1e1250 | busybox | 1.32.1-r4 | 1 |
| voltha/ | 59ab2a00f712 | busybox | 1:1.21.0-1ubuntu1.4+esm1 | 1 |
| wener/ | 9a42bae466d4 | busybox | 1.32.1-r4 | 1 |
| gcr.io/ | 0fad1066de77 | busybox | 1.32.1-r4 | 1 |
| gcr.io/ | ca5c0f0771c8 | busybox | 1.32.1-r4 | 1 |
| gcr.io/ | 5a4a0e54c6d0 | busybox | 1.32.1-r4 | 1 |
| gcr.io/ | 0cb1707fc503 | busybox | 1.32.1-r4 | 1 |
| gcr.io/ | 96dfb19838b8 | busybox | 1.32.1-r4 | 1 |
| ghcr.io/ | 0c84c2d71006 | busybox | 1.32.1-r4 | 1 |
| ghcr.io/ | 821fd6a6f2cd | busybox | 1.32.1-r4 | 1 |
| ghcr.io/ | 1677336db39c | busybox | 1.32.1-r4 | 1 |
| quay.io/ | 6c308e9732e1 | busybox | 1.32.1-r4 | 1 |
| quay.io/ | 18feb3906286 | busybox | 1.32.1-r4 | 1 |
| quay.io/ | 6d56f69b15a3 | busybox | 1.32.1-r4 | 1 |
| quay.io/ | ecd26b74a01f | busybox | 1.32.1-r4 | 1 |
| quay.io/ | fec086394aa9 | busybox | 1.32.1-r4 | 1 |