Search for packages
Package details: pkg:alpm/archlinux/musl@1.1.16-2
purl pkg:alpm/archlinux/musl@1.1.16-2
Next non-vulnerable version 1.1.17-1
Latest non-vulnerable version 1.2.1-2
Risk 4.5
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-svkm-2b47-aaaq
Aliases:
CVE-2017-15650
musl libc before 1.1.17 has a buffer overflow via crafted DNS replies because dns_parse_callback in network/lookup_name.c does not restrict the number of addresses, and thus an attacker can provide an unexpected number by sending A records in a reply to an AAAA query.
1.1.17-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T07:44:39.428911+00:00 Arch Linux Importer Affected by VCID-svkm-2b47-aaaq https://security.archlinux.org/AVG-457 36.0.0
2024-09-18T01:59:42.934559+00:00 Arch Linux Importer Affected by VCID-svkm-2b47-aaaq https://security.archlinux.org/AVG-457 34.0.1
2024-01-03T22:25:58.786024+00:00 Arch Linux Importer Affected by VCID-svkm-2b47-aaaq https://security.archlinux.org/AVG-457 34.0.0rc1