Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
musl-libc musl vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv2
CVE-2015-1817
Stack-based buffer overflow in the inet_pton function in network/inet_pton.c in musl libc 0.9.15 up to and including 1.0.4, and 1.1.0 up to and including 1.1.7 allows malicious users to have unspecified impact via unknown vectors.
Musl-libc Musl 1.1.2
Musl-libc Musl 1.1.1
Musl-libc Musl 1.1.0
Musl-libc Musl 1.0.0
Musl-libc Musl 1.0.1
Musl-libc Musl 1.1.7
Musl-libc Musl 1.1.6
Musl-libc Musl 1.1.4
Musl-libc Musl 1.0.2
Musl-libc Musl 1.0.4
Musl-libc Musl 1.1.5
Musl-libc Musl 1.1.3
Musl-libc Musl 1.0.3
Musl-libc Musl 0.9.15
7.5
CVSSv2
CVE-2019-14697
musl libc up to and including 1.1.23 has an x87 floating-point stack adjustment imbalance, related to the math/i386/ directory. In some cases, use of this library could introduce out-of-bounds writes that are not present in an application's source code.
Musl-libc Musl
4 Github repositories
5
CVSSv2
CVE-2017-15650
musl libc prior to 1.1.17 has a buffer overflow via crafted DNS replies because dns_parse_callback in network/lookup_name.c does not restrict the number of addresses, and thus an attacker can provide an unexpected number by sending A records in a reply to an AAAA query.
Musl-libc Musl
1 Github repository
7.5
CVSSv2
CVE-2014-3484
Multiple stack-based buffer overflows in the __dn_expand function in network/dn_expand.c in musl libc 1.1x prior to 1.1.2 and 0.9.13 up to and including 1.0.3 allow remote malicious users to (1) have unspecified impact via an invalid name length in a DNS response or (2) cause a d...
Musl-libc Musl
2.1
CVSSv2
CVE-2020-28928
In musl libc up to and including 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow).
Musl-libc Musl
Debian Debian Linux 9.0
Fedoraproject Fedora 33
Fedoraproject Fedora 34
Oracle Graalvm 20.3.2
Oracle Graalvm 21.1.0
7 Github repositories
7.5
CVSSv2
CVE-2016-8859
Multiple integer overflows in the TRE library and musl libc allow malicious users to cause memory corruption via a large number of (1) states or (2) tags, which triggers an out-of-bounds write.
Etalabs Musl
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-49333
CVE-2024-33901
CVE-2024-36001
CVE-2024-2835
firewall
XPath injection
authentication bypass
CVE-2024-22120
CVE-2024-32002
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started