CVE-2021-42385
HighAdvisory
Published 15 Nov 2021In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.2
- base score, highest
- EPSS
- 0.028
- 86th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 485
- of 17,781 indexed, latest versions
- Container images
- 502
- deployed by those charts
- Fix available
- 1 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 485 of 17,781 indexed charts deploy, on 502 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| busyboxapk | 1.31.1-r9, 1.31.1-r10, 1.31.1-r16, 1.31.1-r19+8 more | 1.31.1-r11, 1.31.1-r21, 1.32.1-r7, 1.33.1-r6 | 495 |
| busyboxdeb | 1:1.21.0-1ubuntu1, 1:1.21.0-1ubuntu1.4 | no fix listed | 7 |
- OSV records
- ALPINE-CVE-2021-42385UBUNTU-CVE-2021-42385
Charts affected
485 by stars
Container images carrying it
502 by charts deploying them
A fixed version is listed for 1 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| conduction/ | ece1ab544c57 | busybox | 1.31.1-r21 | 1 |
| conduction/ | 25415534d245 | busybox | 1.31.1-r11 | 1 |
| conduction/ | 3423845692c1 | busybox | 1.31.1-r21 | 1 |
| conduction/ | d591f5e6f2a9 | busybox | 1.31.1-r11 | 1 |
| conduction/ | 2744565516e8 | busybox | 1.31.1-r21 | 1 |
| conduction/ | e1d4ad1e22a8 | busybox | 1.31.1-r21 | 1 |
| conduction/ | b6f95c8ead7d | busybox | 1.31.1-r21 | 1 |
| conduction/ | 8f177f9f8a7b | busybox | 1.31.1-r21 | 1 |
| conduction/ | 24f03c57568f | busybox | 1.31.1-r21 | 1 |
| contribsys/ | 5f9a23ee4e86 | busybox | 1.32.1-r7 | 1 |
| crazymax/ | 042536a06596 | busybox | 1.33.1-r6 | 1 |
| curlimages/ | a37d88a5b626 | busybox | 1.33.1-r6 | 1 |
| datawire/ | 07f8fe4f4f8e | busybox | 1.31.1-r21 | 1 |
| datawire/ | 2beb65062c8b | busybox | 1.31.1-r21 | 1 |
| datawire/ | 9716efbdd24b | busybox | 1.31.1-r21 | 1 |
| dchesterton/ | cc70f2238aa9 | busybox | 1.33.1-r6 | 1 |
| deluan/ | 4e9ae3bff6aa | busybox | 1.32.1-r7 | 1 |
| denisshav/ | 4cc8dc5a4499 | busybox | 1.31.1-r11 | 1 |
| denisshav/ | b97cc69fbac6 | busybox | 1.32.1-r7 | 1 |
| devspacecloud/ | 9ccfe38b31b5 | busybox | 1.31.1-r11 | 1 |
| devspacecloud/ | 49c397413f7b | busybox | 1.31.1-r11 | 1 |
| deyaeddin/ | 797b0d06210a | busybox | 1.33.1-r6 | 1 |
| dniel/ | a8d3cb14f4f6 | busybox | 1.31.1-r11 | 1 |
| dollarshaveclub/ | 14a257836529 | busybox | 1.32.1-r7 | 1 |
| dollarshaveclub/ | 663cbf25fcfe | busybox | 1.33.1-r6 | 1 |
| dpage/ | b1f00b8163cf | busybox | 1.31.1-r11 | 1 |
| duyetdev/ | 25e59d223eaa | busybox | 1.31.1-r21 | 1 |
| eameti/ | f36642affa86 | busybox | 1.31.1-r11 | 1 |
| ecadlabs/ | 4bcbe5d1cdd2 | busybox | 1.33.1-r6 | 1 |
| edoburu/ | abc0a4123a81 | busybox | 1.32.1-r7 | 1 |
| eikek0/ | 661ff3ef42cd | busybox | 1.32.1-r7 | 1 |
| elastisys/ | 509b94f1da55 | busybox | 1.31.1-r21 | 1 |
| electerious/ | 5e7173fa321c | busybox | 1.31.1-r11 | 1 |
| envoyproxy/ | 6225750f76e1 | busybox | 1.31.1-r21 | 1 |
| envoyproxy/ | bf862e5f5eca | busybox | 1.31.1-r21 | 1 |
| envoyproxy/ | 71081616da3e | busybox | 1.31.1-r11 | 1 |
| envoyproxy/ | b6cb6e16f8c9 | busybox | 1.31.1-r11 | 1 |
| everpcpc/ | b378d137ae8b | busybox | 1.33.1-r6 | 1 |
| factly/ | 24be158ec7d3 | busybox | 1.32.1-r7 | 1 |
| felddy/ | 6c5d90b90349 | busybox | 1.32.1-r7 | 1 |
| filebrowser/ | 4fcd47af573c | busybox | 1.33.1-r6 | 1 |
| filebrowser/ | c5d0a75a0041 | busybox | 1.32.1-r7 | 1 |
| fission/ | 3fcfd8a0fa5d | busybox | 1.32.1-r7 | 1 |
| fission/ | fa0f24cdb9cd | busybox | 1.32.1-r7 | 1 |
| fission/ | 04c6e06af175 | busybox | 1.32.1-r7 | 1 |
| flant/ | 2355a44928d6 | busybox | 1.31.1-r21 | 1 |
| fluxcd/ | 92b891e495d8 | busybox | 1.32.1-r7 | 1 |
| fluxcd/ | 31a8c79a6803 | busybox | 1.32.1-r7 | 1 |
| foomo/ | b21330d692e3 | busybox | 1.31.1-r21 | 1 |
| foxcpp/ | 8fa2bd8f6830 | busybox | 1.33.1-r6 | 1 |