CVE-2020-28928 PUBLISHED

In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow).

EPSS 0.04% · 13.8th percentile

Risk Scores

EPSS Score
0.04%
13.8th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:16.04:LTSmusl1.1.9-1ubuntu0.1~esm2, 0, 1.1.9-1
Ubuntu:Pro:18.04:LTSmusl1.1.19-1, 1.1.18-1, 0
Ubuntu:Pro:14.04:LTSmusl0, 0.9.14-2, 0.9.14-2ubuntu1
Ubuntu:Pro:20.04:LTSmusl0, 1.1.23-2build1, 1.1.24-1

Timeline

References

Open in Interactive Console →