CVE-2021-42374
MediumAdvisory
Published 15 Nov 2021In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.3
- base score, highest
- EPSS
- 0.006
- 48th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 478
- of 17,787 indexed, latest versions
- Container images
- 495
- deployed by those charts
- Fix available
- 1 of 1
- affected package
The matching OSV records carry no description.
Carried by container images the latest versions of 478 of 17,787 indexed charts deploy, on 495 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| busyboxapk | 1.31.1-r9, 1.31.1-r10, 1.31.1-r16, 1.31.1-r19+8 more | 1.31.1-r11, 1.31.1-r21, 1.32.1-r7, 1.33.1-r4 | 495 |
- OSV records
- ALPINE-CVE-2021-42374
Charts affected
478 by stars
Container images carrying it
495 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| taigaio/ | 4d367b1e1250 | busybox | 1.32.1-r7 | 1 |
| temporalio/ | 33cfa863d8ce | busybox | 1.31.1-r11 | 1 |
| testhubio/ | e86c2db53be8 | busybox | 1.31.1-r11 | 1 |
| thelounge/ | 639978459c3a | busybox | 1.31.1-r11 | 1 |
| timescale/ | 7758704d4a14 | busybox | 1.32.1-r7 | 1 |
| tobiasbp/ | 14bee6e33a26 | busybox | 1.31.1-r21 | 1 |
| trafex/ | ee0b7c6cce07 | busybox | 1.33.1-r4 | 1 |
| trufflesuite/ | c062707f17f3 | busybox | 1.31.1-r11 | 1 |
| turt2live/ | bfbd459f89a5 | busybox | 1.32.1-r7 | 1 |
| tvanro/ | 6909015f0328 | busybox | 1.33.1-r4 | 1 |
| tzahi12345/ | 3720b856bd2f | busybox | 1.31.1-r21 | 1 |
| untergeek/ | 468123bc0a7b | busybox | 1.32.1-r7 | 1 |
| vabene1111/ | ec4e9e2905b0 | busybox | 1.31.1-r21 | 1 |
| vectorim/ | 080e313abd37 | busybox | 1.31.1-r21 | 1 |
| vectorim/ | 234bed2ac92a | busybox | 1.31.1-r21 | 1 |
| vectorim/ | 84bb5af00b5d | busybox | 1.33.1-r4 | 1 |
| viadee/ | 2e27e3b3ee56 | busybox | 1.31.1-r21 | 1 |
| vikunja/ | 8cba0520bf8c | busybox | 1.31.1-r21 | 1 |
| vitorbari/ | fd3ccb820ada | busybox | 1.33.1-r4 | 1 |
| voidxmh/ | 93e42a569ca8 | busybox | 1.33.1-r4 | 1 |
| voidxmh/ | 1b7397412320 | busybox | 1.33.1-r4 | 1 |
| voidxmh/ | 2ff3f2146547 | busybox | 1.33.1-r4 | 1 |
| volantmq/ | 9bfe7857ebc3 | busybox | 1.31.1-r11 | 1 |
| vrijbrp/ | 5225494315e2 | busybox | 1.32.1-r7 | 1 |
| vultr/ | 1806f17d620c | busybox | 1.33.1-r4 | 1 |
| vultr/ | 41d26735d437 | busybox | 1.33.1-r4 | 1 |
| wallabag/ | 5e4c26a7fb4a | busybox | 1.31.1-r21 | 1 |
| weaveworks/ | 174307de1b36 | busybox | 1.31.1-r11 | 1 |
| weetmuts/ | a79967400c61 | busybox | 1.33.1-r4 | 1 |
| wener/ | ef3bd19da190 | busybox | 1.31.1-r21 | 1 |
| wener/ | cc9fd4da44c0 | busybox | 1.33.1-r4 | 1 |
| wener/ | 5c92cc9e8597 | busybox | 1.33.1-r4 | 1 |
| wener/ | 9a42bae466d4 | busybox | 1.32.1-r7 | 1 |
| zazuko/ | 054be137de70 | busybox | 1.31.1-r11 | 1 |
| zwavejs/ | 15a6040fb468 | busybox | 1.31.1-r11 | 1 |
| gcr.io/ | 135327c978de | busybox | 1.31.1-r21 | 1 |
| gcr.io/ | a4011eae6a0b | busybox | 1.31.1-r11 | 1 |
| gcr.io/ | 566733b4d2d5 | busybox | 1.31.1-r21 | 1 |
| gcr.io/ | 0fad1066de77 | busybox | 1.32.1-r7 | 1 |
| gcr.io/ | 49d458a3650f | busybox | 1.31.1-r11 | 1 |
| gcr.io/ | ca5c0f0771c8 | busybox | 1.32.1-r7 | 1 |
| gcr.io/ | 6eb201217a8f | busybox | 1.31.1-r11 | 1 |
| gcr.io/ | 5a4a0e54c6d0 | busybox | 1.32.1-r7 | 1 |
| gcr.io/ | 0cb1707fc503 | busybox | 1.32.1-r7 | 1 |
| gcr.io/ | 67f4f162da8d | busybox | 1.32.1-r7 | 1 |
| gcr.io/ | 989a60847416 | busybox | 1.33.1-r4 | 1 |
| gcr.io/ | 96dfb19838b8 | busybox | 1.32.1-r7 | 1 |
| gcr.io/ | ba66607c947c | busybox | 1.32.1-r7 | 1 |
| gcr.io/ | 2b1a3d08caac | busybox | 1.33.1-r4 | 1 |
| gcr.io/ | a348db3e4d74 | busybox | 1.32.1-r7 | 1 |