USN-5990-1

Dashboard / Vulnerabilities / USN-5990-1

USN-5990-1

Summary: musl vulnerabilities

Details: It was discovered that musl did not handle certain i386 math functions properly. An attacker could use this vulnerability to cause a denial of service (crash) or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, and Ubuntu 18.04 LTS. (CVE-2019-14697) It was discovered that musl did not handle wide-character conversion properly. A remote attacker could use this vulnerability to cause resource consumption (infinite loop), denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. (CVE-2020-28928)

References: https://ubuntu.com/security/notices/USN-5990-1, https://ubuntu.com/security/CVE-2019-14697, https://ubuntu.com/security/CVE-2020-28928