CVE-2020-28928: Buffer Overflow
In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow).
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is CVE-2020-28928?
CVE-2020-28928 is a vulnerability in musl libc that allows a local attacker to cause a denial of service.
What is the severity of CVE-2020-28928?
CVE-2020-28928 has a severity rating of 6.2 (Medium).
Which software versions are affected by CVE-2020-28928?
musl libc 1.2.1, Debian Linux 9.0, Fedora 33, Fedora 34, Oracle GraalVM 20.3.2, Oracle GraalVM 21.1.0, and IBM Security Verify Bridge (all versions) are affected by CVE-2020-28928.
How can an attacker exploit CVE-2020-28928?
A local attacker can exploit CVE-2020-28928 by sending specially-crafted input to the wcsnrtombs function, causing the application to enter into an infinite loop.
Are there any references for CVE-2020-28928?
Yes, you can find more information about CVE-2020-28928 at the following references: [link1], [link2], [link3].