CVE-2011-2168 Integer overflow in n/a

Medium 5.0 Published Updated

Integer overflows in OpenBSD libc glob implementation allow context-dependent attackers to cause unspecified impacts via crafted strings.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Not stated
Victim action needed
Not needed
Fix
None listed

What is CVE-2011-2168?

CVE-2011-2168 is a medium-severity vulnerability in Openbsd Openbsd, published on 24 May 2011.

Official description

Multiple integer overflows in the glob implementation in libc in OpenBSD before 4.9 might allow context-dependent attackers to have an unspecified impact via a crafted string, related to the GLOB_APPEND and GLOB_DOOFFS flags, a different issue than CVE-2011-0418.

Weakness: CWE-189

Which versions are affected by CVE-2011-2168?

It affects 1 product.

Products include Openbsd Openbsd.

How do I fix CVE-2011-2168?

No fix has been published for CVE-2011-2168 yet. Limit exposure of the affected software until one is available.

Is CVE-2011-2168 being exploited?

There is no known exploitation of CVE-2011-2168 in the wild and no public exploit code.

All Openbsd Openbsd vulnerabilities

Sources

Also known as GHSA-x6mv-pcvr-j73m.

Is CVE-2011-2168 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free