p PatchFirst

CVE-2020-28928

CVE-2020-28928

This page contains facts from public vulnerability sources. Check the original advisory before updating.

In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow).

CVSS 5.5 · Medium · EPSS 0.7% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • musl Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.2.2-1

    Update to 1.2.2-1

  • musl Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.2.2-1

    Update to 1.2.2-1

  • musl Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.2.2-1

    Update to 1.2.2-1

  • musl Ubuntu:Pro:14.04:LTS

    Versions
    • 0.9.14-2
    • 0.9.14-2ubuntu1
    • 0.9.15-1
    • 0.9.15-1ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: < 0.9.15-1ubuntu0.1~esm2

    Update to 0.9.15-1ubuntu0.1~esm2

  • musl Ubuntu:Pro:16.04:LTS

    Versions
    • 1.1.9-1
    • 1.1.9-1ubuntu0.1~esm2
    Affected ranges
    • ECOSYSTEM: < 1.1.9-1ubuntu0.1~esm3

    Update to 1.1.9-1ubuntu0.1~esm3

  • musl Ubuntu:Pro:18.04:LTS

    Versions
    • 1.1.16-3
    • 1.1.18-1
    • 1.1.19-1
    Affected ranges
    • ECOSYSTEM: < 1.1.19-1ubuntu0.1~esm1

    Update to 1.1.19-1ubuntu0.1~esm1

  • musl Ubuntu:Pro:20.04:LTS

    Versions
    • 1.1.23-2build1
    • 1.1.24-1
    Affected ranges
    • ECOSYSTEM: < 1.1.24-1ubuntu0.1~esm1

    Update to 1.1.24-1ubuntu0.1~esm1

Original sources

Check your server →