Lucene search
+L

154 matches found

NVD
NVD
added 2020/11/24 6:15 p.m.19 views

CVE-2020-28928

In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access buffer overflow...

5.5CVSS5.6AI score0.00644EPSS
Exploits0References10
OSV
OSV
added 2020/11/24 6:15 p.m.25 views

CVE-2020-28928

In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access buffer overflow...

5.5CVSS6.9AI score
Exploits0References10
OSV
OSV
added 2020/11/24 6:15 p.m.4 views

ALPINE-CVE-2020-28928

In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access buffer overflow...

5.5CVSS7.2AI score0.00644EPSS
Exploits0References1
OSV
OSV
added 2020/11/24 6:15 p.m.1 views

DEBIAN-CVE-2020-28928

In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access buffer overflow...

5.5CVSS7.3AI score0.00644EPSS
Exploits0References1
Prion
Prion
added 2020/11/24 6:15 p.m.28 views

Buffer overflow

In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access buffer overflow...

2.1CVSS5.8AI score0.00644EPSS
Exploits0References10Affected Software4
OSV
OSV
added 2020/11/24 6:15 p.m.5 views

UBUNTU-CVE-2020-28928

In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access buffer overflow...

5.5CVSS7AI score0.00644EPSS
Exploits0References4
CVE
CVE
added 2020/11/24 6:1 p.m.135 views

CVE-2020-28928

The CVE-2020-28928 entry concerns musl libc up to version 1.2.1. The root cause is a mishandling in wcsnrtombs of destination buffer size when applying a source character limit, which can lead to an invalid write (buffer overflow) or an infinite loop depending on input, as documented in multiple ...

5.5CVSS5.8AI score0.00644EPSS
Exploits0References10Affected Software1
Debian CVE
Debian CVE
added 2020/11/24 6:1 p.m.41 views

CVE-2020-28928

In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access buffer overflow...

5.5CVSS6.2AI score0.00644EPSS
Exploits0
Cvelist
Cvelist
added 2020/11/24 6:1 p.m.29 views

CVE-2020-28928

In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access buffer overflow...

5.9AI score0.00644EPSS
Exploits0References10
AlpineLinux
AlpineLinux
added 2020/11/24 6:1 p.m.51 views

CVE-2020-28928

In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access buffer overflow...

5.5CVSS6AI score0.00644EPSS
Exploits0
UbuntuCve
UbuntuCve
added 2020/11/24 12:0 a.m.26 views

CVE-2020-28928

In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access buffer overflow...

5.5CVSS7AI score0.00644EPSS
Exploits0References3
CNNVD
CNNVD
added 2020/11/24 12:0 a.m.12 views

musl libc buffer error vulnerability

musl libc is musl open source an open source C language standard library . Mainly used for embedded systems and mobile devices and so on. A buffer error vulnerability exists in musl libc version 1.2.1 and earlier versions, which stems from wcsnrtombs incorrectly handling a specific combination of...

5.5CVSS6.9AI score0.00644EPSS
Exploits0References19
Positive Technologies
Positive Technologies
added 2020/11/18 12:0 a.m.5 views

PT-2020-6698 · Musl Libc +3 · Musl Libc +3

Name of the Vulnerable Software and Affected Versions: musl libc versions 1.2.1 and earlier Description: The issue is related to the wcsnrtombs function in musl libc, which mishandles certain combinations of destination buffer size and source character limit. This can lead to an invalid write...

9.8CVSS7.9AI score0.03362EPSS
Exploits1References51
Tenable Nessus
Tenable Nessus
added 2020/03/16 12:0 a.m.36 views

GLSA-202003-13 : musl: x87 floating-point stack adjustment imbalance

The remote host is affected by the vulnerability described in GLSA-202003-13 musl: x87 floating-point stack adjustment imbalance A flaw in musl libcs arch-specific math assembly code for i386 was found which can lead to x87 stack overflow in the execution of subsequent math code. Impact : Impact...

9.8CVSS8.3AI score0.02704EPSS
Exploits1References2
Kitploit
Kitploit
added 2020/03/14 9:30 p.m.128 views

TEA - Ssh-Client Worm

A ssh-client worm made with tas framework. How it works? This is a fakessh-client that manipulates the tty input/output to execute arbitrary commands and upload itself through the ssh connection. To work properly, the remote machine needs: display the "Last login" message when login. dd and stty...

8.3AI score
Exploits0References2
NVD
NVD
added 2020/02/20 4:15 a.m.31 views

CVE-2014-3484

Multiple stack-based buffer overflows in the dnexpand function in network/dnexpand.c in musl libc 1.1x before 1.1.2 and 0.9.13 through 1.0.3 allow remote attackers to 1 have unspecified impact via an invalid name length in a DNS response or 2 cause a denial of service crash via an invalid name...

9.8CVSS9.7AI score0.02204EPSS
Exploits0References2
OSV
OSV
added 2020/02/20 4:15 a.m.11 views

CVE-2014-3484

Multiple stack-based buffer overflows in the dnexpand function in network/dnexpand.c in musl libc 1.1x before 1.1.2 and 0.9.13 through 1.0.3 allow remote attackers to 1 have unspecified impact via an invalid name length in a DNS response or 2 cause a denial of service crash via an invalid name...

9.8CVSS9.6AI score
Exploits0References4
OSV
OSV
added 2020/02/20 4:15 a.m.6 views

DEBIAN-CVE-2014-3484

Multiple stack-based buffer overflows in the dnexpand function in network/dnexpand.c in musl libc 1.1x before 1.1.2 and 0.9.13 through 1.0.3 allow remote attackers to 1 have unspecified impact via an invalid name length in a DNS response or 2 cause a denial of service crash via an invalid name...

9.8CVSS7.4AI score0.02204EPSS
Exploits0References1
Prion
Prion
added 2020/02/20 4:15 a.m.24 views

Stack overflow

Multiple stack-based buffer overflows in the dnexpand function in network/dnexpand.c in musl libc 1.1x before 1.1.2 and 0.9.13 through 1.0.3 allow remote attackers to 1 have unspecified impact via an invalid name length in a DNS response or 2 cause a denial of service crash via an invalid name...

7.5CVSS7.6AI score0.02204EPSS
Exploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2020/02/20 4:15 a.m.49 views

CVE-2014-3484

Multiple stack-based buffer overflows in the dnexpand function in network/dnexpand.c in musl libc 1.1x before 1.1.2 and 0.9.13 through 1.0.3 allow remote attackers to 1 have unspecified impact via an invalid name length in a DNS response or 2 cause a denial of service crash via an invalid name...

9.8CVSS7.5AI score0.02204EPSS
Exploits0References3
Rows per page
Query Builder