Vulnerabilities > Musl Libc > Musl > 1.1.4
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2020-11-24 | CVE-2020-28928 | Out-of-bounds Write vulnerability in multiple products In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow). | 5.5 |
| 2017-10-19 | CVE-2017-15650 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Musl-Libc Musl musl libc before 1.1.17 has a buffer overflow via crafted DNS replies because dns_parse_callback in network/lookup_name.c does not restrict the number of addresses, and thus an attacker can provide an unexpected number by sending A records in a reply to an AAAA query. | 5.0 |
| 2017-08-18 | CVE-2015-1817 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Musl-Libc Musl Stack-based buffer overflow in the inet_pton function in network/inet_pton.c in musl libc 0.9.15 through 1.0.4, and 1.1.0 through 1.1.7 allows attackers to have unspecified impact via unknown vectors. | 7.5 |