{"id":"CVE-2020-28928","aliases":["ALPINE-CVE-2020-28928","BELL-CVE-2020-28928","DEBIAN-CVE-2020-28928","DLA-2474-1","EUVD-2020-21316","GHSA-7gwx-j9qc-6c6w","UBUNTU-CVE-2020-28928","USN-5990-1"],"status":"published","title":"In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer...","description":"In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow).","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00652,"percentile":0.51544,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2020-11-24T18:01:05Z","modified":"2026-10-26T12:01:58Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"musl","fixed_in":["1.1.22-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"musl","fixed_in":["1.1.24-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"musl","fixed_in":["1.1.24-r10"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"musl","fixed_in":["1.2.2_pre2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"musl","fixed_in":["1.2.2_pre2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"musl","fixed_in":["1.2.2_pre2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"musl","fixed_in":["1.2.2_pre2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"musl","fixed_in":["1.2.2_pre2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"musl","fixed_in":["1.2.2_pre2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"musl","fixed_in":["1.2.2_pre2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"musl","fixed_in":["1.2.2_pre2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"musl","fixed_in":["1.2.2_pre2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"musl","fixed_in":["1.2.2_pre2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"musl","fixed_in":["1.2.2_pre2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"musl","fixed_in":["1.2.2_pre2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"musl","fixed_in":["1.1.20-r6"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"musl","fixed_in":["1.2.2-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"musl","fixed_in":["1.2.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"musl","fixed_in":["1.2.2-1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"musl","fixed_in":["1.1.16-3+deb9u1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"musl","fixed_in":["0.9.15-1ubuntu0.1~esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"musl","fixed_in":["1.1.9-1ubuntu0.1~esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"musl","fixed_in":["1.1.19-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"musl","fixed_in":["1.1.24-1ubuntu0.1~esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"musl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.22-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"musl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.24-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"musl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.24-r10"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"musl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2_pre2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"musl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2_pre2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"musl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2_pre2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"musl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2_pre2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"musl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2_pre2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"musl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2_pre2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"musl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2_pre2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"musl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2_pre2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"musl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2_pre2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"musl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2_pre2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"musl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2_pre2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"musl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2_pre2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"musl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.20-r6"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"musl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"musl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"musl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"musl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.16-3+deb9u1"}]}],"versions":["1.1.16-3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"musl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.15-1ubuntu0.1~esm2"}]}],"versions":["0.9.14-2","0.9.14-2ubuntu1","0.9.15-1","0.9.15-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"musl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.9-1ubuntu0.1~esm3"}]}],"versions":["1.1.9-1","1.1.9-1ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"musl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.19-1ubuntu0.1~esm1"}]}],"versions":["1.1.16-3","1.1.18-1","1.1.19-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"musl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.24-1ubuntu0.1~esm1"}]}],"versions":["1.1.23-2build1","1.1.24-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"musl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.15-1ubuntu0.1~esm2"}]}],"versions":["0.9.14-2","0.9.14-2ubuntu1","0.9.15-1","0.9.15-1ubuntu0.1~esm1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"musl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.9-1ubuntu0.1~esm3"}]}],"versions":["1.1.9-1","1.1.9-1ubuntu0.1~esm2"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"musl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.19-1ubuntu0.1~esm1"}]}],"versions":["1.1.16-3","1.1.18-1","1.1.19-1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"musl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.24-1ubuntu0.1~esm1"}]}],"versions":["1.1.23-2build1","1.1.24-1"],"bundled":2}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"musl-libc","product":"musl"},{"vendor":"oracle","product":"graalvm"}],"references":[{"url":"https://musl.libc.org/releases.html","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/11/msg00050.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.apache.org/thread.html/ra63e8dc5137d952afc55dbbfa63be83304ecf842d1eab1ff3ebb29e2%40%3Cnotifications.apisix.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r90b60cf49348e515257b4950900c1bd3ab95a960cf2469d919c7264e%40%3Cnotifications.apisix.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.apache.org/thread.html/r2134abfe847bea7795f0e53756d10a47e6643f35ab8169df8b8a9eb1%40%3Cnotifications.apisix.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UW27QVY7ERPTSGKS4KAWE5TU7EJWHKVQ/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKQ3RVSMVZNZNO4D65W2CZZ4DMYFZN2Q/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://www.oracle.com//security-alerts/cpujul2021.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"http://www.openwall.com/lists/oss-security/2020/11/20/4","tags":["x_refsource_CONFIRM","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2021.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28928"},{"url":"https://lists.apache.org/thread.html/r2134abfe847bea7795f0e53756d10a47e6643f35ab8169df8b8a9eb1@%3Cnotifications.apisix.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r90b60cf49348e515257b4950900c1bd3ab95a960cf2469d919c7264e@%3Cnotifications.apisix.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/ra63e8dc5137d952afc55dbbfa63be83304ecf842d1eab1ff3ebb29e2@%3Cnotifications.apisix.apache.org%3E"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKQ3RVSMVZNZNO4D65W2CZZ4DMYFZN2Q/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UW27QVY7ERPTSGKS4KAWE5TU7EJWHKVQ/"},{"url":"https://github.com/advisories/GHSA-7gwx-j9qc-6c6w"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-28928","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2020-28928","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-28928","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-28928","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2020/11/20/4","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5990-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28928","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-14697","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2020-28928","description":"In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow).","status":"published","published":"2020-11-24T18:01:05Z","modified":"2024-08-04T16:48:00.476Z","updated_at":"2026-11-02T14:35:57.352161Z"}],"euvd":[{"id":"EUVD-2020-21316","description":"In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow).","status":"published","published":"2020-11-24T18:01:05Z","modified":"2024-08-04T16:48:00Z","updated_at":"2026-11-03T03:07:08.475588Z"}],"ghsa":[{"id":"GHSA-7gwx-j9qc-6c6w","title":"In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer...","description":"In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow).","status":"published","published":"2022-05-24T17:34:54Z","modified":"2023-01-29T05:04:33Z","cwes":["CWE-787"],"updated_at":"2026-11-02T14:45:35.161944Z"}],"nvd":[{"id":"CVE-2020-28928","description":"In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow).","status":"published","published":"2020-11-24T18:15:12.207Z","modified":"2026-06-17T03:10:50.527Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","level":"low","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:06:25.394006Z"}],"osv":[{"id":"ALPINE-CVE-2020-28928","description":"In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow).","status":"published","published":"2020-11-24T18:15:12.207Z","modified":"2026-10-26T11:17:55.166308572Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:27:48.11886Z"},{"id":"BELL-CVE-2020-28928","title":"CVE-2020-28928 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:13:48.417745Z","modified":"2026-01-26T09:46:42.975261Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:15.925958Z"},{"id":"CVE-2020-28928","description":"In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow).","status":"published","published":"2020-11-24T18:15:12.207Z","modified":"2026-10-24T10:30:59.095986502Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:16.612899Z"},{"id":"DEBIAN-CVE-2020-28928","description":"In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow).","status":"published","published":"2020-11-24T18:15:12.207Z","modified":"2026-10-26T12:01:58.85889511Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:34.019707Z"},{"id":"UBUNTU-CVE-2020-28928","description":"In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow).","status":"published","published":"2020-11-24T18:15:00Z","modified":"2026-04-22T12:39:30.452596Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:24.541803Z"},{"id":"DLA-2474-1","title":"musl - security update","status":"published","published":"2020-12-01T00:00:00Z","modified":"2026-03-09T01:21:48.354755Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"USN-5990-1","title":"musl vulnerabilities","description":"It was discovered that musl did not handle certain i386 math functions\nproperly. An attacker could use this vulnerability to cause a denial of\nservice (crash) or possibly execute arbitrary code. This issue only\naffected Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, and Ubuntu 18.04 LTS.\n(CVE-2019-14697)\n\nIt was discovered that musl did not handle wide-character conversion\nproperly. A remote attacker could use this vulnerability to cause resource\nconsumption (infinite loop), denial of service, or possibly execute\narbitrary code. This issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04\nESM, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2020-28928)\n","status":"published","published":"2023-03-31T00:44:58Z","modified":"2026-06-29T13:50:51.044714834Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}