SB2011052505 - Input validation error in OpenBSD
Published: May 25, 2011 Updated: August 11, 2020
Security Bulletin ID
SB2011052505
Severity
Medium
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Input validation error (CVE-ID: CVE-2011-2168)
The vulnerability allows a remote non-authenticated attacker to perform service disruption.
Multiple integer overflows in the glob implementation in libc in OpenBSD before 4.9 might allow context-dependent attackers to have an unspecified impact via a crafted string, related to the GLOB_APPEND and GLOB_DOOFFS flags, a different issue than CVE-2011-0418.
Remediation
Install update from vendor's website.