CVEvulnerability
CVE-2011-2168
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-05-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-189
Description
Multiple integer overflows in the glob implementation in libc in OpenBSD before 4.9 might allow context-dependent attackers to have an unspecified impact via a crafted string, related to the GLOB_APPEND and GLOB_DOOFFS flags, a different issue than CVE-2011-0418.
Affected configurations
• openbsd openbsd (<= 4.8)
• openbsd openbsd 2.0
• openbsd openbsd 2.1
• openbsd openbsd 2.2
• openbsd openbsd 2.3
• openbsd openbsd 2.4
• openbsd openbsd 2.5
• openbsd openbsd 2.6
• openbsd openbsd 2.7
• openbsd openbsd 2.8
• openbsd openbsd 2.9
• openbsd openbsd 3.0
• openbsd openbsd 3.1
• openbsd openbsd 3.2
• openbsd openbsd 3.3
• openbsd openbsd 3.4
• openbsd openbsd 3.5
• openbsd openbsd 3.6
• openbsd openbsd 3.7
• openbsd openbsd 3.8
• openbsd openbsd 3.9
• openbsd openbsd 4.0
• openbsd openbsd 4.1
• openbsd openbsd 4.2
• openbsd openbsd 4.3
• openbsd openbsd 4.4
• openbsd openbsd 4.5
• openbsd openbsd 4.6
• openbsd openbsd 4.7
Related
Weakness · not in database (1)
References
- http://securityreason.com/achievement_securityalert/97 securityreason.com
- http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gen/glob.c#rev1.35 Patch
- http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gen/glob.c.diff?r1=1.34%3Br2=1.35%3Bf=h www.openbsd.org
- http://www.securityfocus.com/bid/48004 www.securityfocus.com
- http://securityreason.com/achievement_securityalert/97 securityreason.com
- http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gen/glob.c#rev1.35 Patch
- http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libc/gen/glob.c.diff?r1=1.34%3Br2=1.35%3Bf=h www.openbsd.org
- http://www.securityfocus.com/bid/48004 www.securityfocus.com