musl-libc musl vulnerabilities and exploits

(subscribe to this query)

In musl libc up to and including 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow).

Musl-libc Musl Debian Debian Linux 9.0 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Oracle Graalvm 20.3.2 Oracle Graalvm 21.1.0

7 Github repositories

Multiple stack-based buffer overflows in the __dn_expand function in network/dn_expand.c in musl libc 1.1x prior to 1.1.2 and 0.9.13 up to and including 1.0.3 allow remote malicious users to (1) have unspecified impact via an invalid name length in a DNS response or (2) cause a d...

musl libc up to and including 1.1.23 has an x87 floating-point stack adjustment imbalance, related to the math/i386/ directory. In some cases, use of this library could introduce out-of-bounds writes that are not present in an application's source code.

4 Github repositories

musl libc prior to 1.1.17 has a buffer overflow via crafted DNS replies because dns_parse_callback in network/lookup_name.c does not restrict the number of addresses, and thus an attacker can provide an unexpected number by sending A records in a reply to an AAAA query.

1 Github repository

Stack-based buffer overflow in the inet_pton function in network/inet_pton.c in musl libc 0.9.15 up to and including 1.0.4, and 1.1.0 up to and including 1.1.7 allows malicious users to have unspecified impact via unknown vectors.

Musl-libc Musl 1.1.2 Musl-libc Musl 1.1.1 Musl-libc Musl 1.1.0 Musl-libc Musl 1.0.0 Musl-libc Musl 1.0.1 Musl-libc Musl 1.1.7 Musl-libc Musl 1.1.6 Musl-libc Musl 1.1.4 Musl-libc Musl 1.0.2 Musl-libc Musl 1.0.4 Musl-libc Musl 1.1.5 Musl-libc Musl 1.1.3 Musl-libc Musl 1.0.3 Musl-libc Musl 0.9.15

Multiple integer overflows in the TRE library and musl libc allow malicious users to cause memory corruption via a large number of (1) states or (2) tags, which triggers an out-of-bounds write.

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook