Vulnerabilities > CVE-2020-28928 - Out-of-bounds Write vulnerability in multiple products

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

local

low complexity

NVD

Published: 2020-11-24

Updated: 2024-11-21

Summary

In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow).

Vulnerable Configurations

Part	Description	Count
Application	Musl-Libc Musl Libc Musl 0.5.0 Musl Libc Musl 0.5.9 Musl Libc Musl 0.6.0 Musl Libc Musl 0.7.0 Musl Libc Musl 0.7.1 Musl Libc Musl 0.7.5 Musl Libc Musl 0.7.6 Musl Libc Musl 0.7.7 Musl Libc Musl 0.7.8 Musl Libc Musl 0.7.9 Musl Libc Musl 0.7.10 Musl Libc Musl 0.7.11 Musl Libc Musl 0.7.12 Musl Libc Musl 0.8.0 Musl Libc Musl 0.8.1 Musl Libc Musl 0.8.2 Musl Libc Musl 0.8.3 Musl Libc Musl 0.8.4 Musl Libc Musl 0.8.5 Musl Libc Musl 0.8.6 Musl Libc Musl 0.8.7 Musl Libc Musl 0.8.8 Musl Libc Musl 0.8.9 Musl Libc Musl 0.8.10 Musl Libc Musl 0.9.0 Musl Libc Musl 0.9.1 Musl Libc Musl 0.9.2 Musl Libc Musl 0.9.3 Musl Libc Musl 0.9.4 Musl Libc Musl 0.9.5 Musl Libc Musl 0.9.6 Musl Libc Musl 0.9.7 Musl Libc Musl 0.9.8 Musl Libc Musl 0.9.9 Musl Libc Musl 0.9.10 Musl Libc Musl 0.9.11 Musl Libc Musl 0.9.12 Musl Libc Musl 0.9.13 Musl Libc Musl 0.9.14 Musl Libc Musl 0.9.15 Musl Libc Musl 1.0.0 Musl Libc Musl 1.0.1 Musl Libc Musl 1.0.2 Musl Libc Musl 1.0.3 Musl Libc Musl 1.0.4 Musl Libc Musl 1.0.5 Musl Libc Musl 1.1.0 Musl Libc Musl 1.1.1 Musl Libc Musl 1.1.2 Musl Libc Musl 1.1.3 Musl Libc Musl 1.1.4 Musl Libc Musl 1.1.5 Musl Libc Musl 1.1.6 Musl Libc Musl 1.1.7 Musl Libc Musl 1.1.8 Musl Libc Musl 1.1.9 Musl Libc Musl 1.1.10 Musl Libc Musl 1.1.11 Musl Libc Musl 1.1.12 Musl Libc Musl 1.1.13 Musl Libc Musl 1.1.14 Musl Libc Musl 1.1.15 Musl Libc Musl 1.1.16 Musl Libc Musl 1.1.17 Musl Libc Musl 1.1.18 Musl Libc Musl 1.1.19 Musl Libc Musl 1.1.20 Musl Libc Musl 1.1.21 Musl Libc Musl 1.1.22 Musl Libc Musl 1.1.23 Musl Libc Musl 1.1.24 Musl Libc Musl 1.2.0 Musl Libc Musl 1.2.1	92
Application	Oracle Oracle Graalvm 20.3.2 Oracle Graalvm 21.1.0	2
OS	Debian Debian Debian Linux 9.0	1
OS	Fedoraproject Fedoraproject Fedora 33 Fedoraproject Fedora 34	2

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References