USN-5990-1: musl vulnerabilities

It was discovered that musl did not handle certain i386 math functions properly. An attacker could use this vulnerability to cause a denial of service crash or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, and Ubuntu 18.04 LTS. CVE-2019-14697 It was...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : musl vulnerabilities (USN-5990-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5990-1 advisory. It was discovered that musl did not handle certain i386 math functions properly. An attacker could use this vulnerability to caus...

Ubuntu: Security Advisory (USN-5990-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[ASA-202011-29] musl: arbitrary code execution

Arch Linux Security Advisory ASA-202011-29 ========================================== Severity: Medium Date : 2020-11-26 CVE-ID : CVE-2020-28928 Package : musl Type : arbitrary code execution Remote : No Link : https://security.archlinux.org/AVG-1287 Summary ======= The package musl before versio...

CVE-2020-28928

creationtimestamp| type| source ---|---|--- 2020-11-24 20:47:00+00:00| seen| https://t.me/cibsecurity/16799...

ALPINE-CVE-2020-28928

In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access buffer overflow...

CVE-2020-28928

The CVE-2020-28928 entry concerns musl libc up to version 1.2.1. The root cause is a mishandling in wcsnrtombs of destination buffer size when applying a source character limit, which can lead to an invalid write (buffer overflow) or an infinite loop depending on input, as documented in multiple ...

CVE-2020-28928

In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access buffer overflow...