Musl-Libc: >> Musl >> 0.8.7 Security Vulnerabilities
In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow).
CVSS Score
5.5
EPSS Score
0.0
Published
2020-11-24
musl libc before 1.1.17 has a buffer overflow via crafted DNS replies because dns_parse_callback in network/lookup_name.c does not restrict the number of addresses, and thus an attacker can provide an unexpected number by sending A records in a reply to an AAAA query.
CVSS Score
7.5
EPSS Score
0.006
Published
2017-10-19