CVE:CVE-2020-28928
CNNVD:CNNVD-202011-1872
musl libc是一款开源的C语言标准库。主要用于嵌入式系统与移动设备等。
musl libc 1.2.1版本及之前版本存在缓冲区错误漏洞，该漏洞源于wcsnrtombs错误地处理了目标缓冲区大小和源字符限制的特定组合。
solution:Upgrade musl-libc musl to a higher version than 1.2.1,and avoid the version (,1.2.1]; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade fedoraproject fedora to a higher version than 33,34,and avoid the version 33,34; Upgrade oracle graalvm to a higher version than 20.3.2,21.1.0,and avoid the version 20.3.2,21.1.0