CVE-2020-28928

CVE-2020-28928 In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow). https://t.co/6OYr2c4dzX?amp=1

CVE-2020-28928 In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow). https://t.co/6OYr2c4dzX?amp=1

ECRのイメージスキャンでCVE-2020-28928やでって言われてalpineのコンテナの中見たら入ってるmuslは上記CVEに対応済みのバージョンで、何でやと思って色々ググってたらスキャナさんサイドの問題ぽいよって出てきて手のうちようがなくなって打ちひしがれてる。

CVE-2020-28928 In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow). https://t.co/6OYr2c4dzX?amp=1

CVE-2020-28928 In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow). https://t.co/6OYr2c4dzX

ma2saka

CVE-2020-28928ってなんだっけか。