Description
The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) when called with an untrusted, crafted pattern, potentially resulting in a denial of service or disclosure of information. This occurs because atoi was used but strtoul should have been used to ensure correct calculations.
References (6)
Scores
CVSS v3
9.1
EPSS
0.0160
EPSS Percentile
81.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-190
CWE-704
Status
published
Products (7)
debian/debian_linux
10.0
gnu/glibc
< 2.31
netapp/active_iq_unified_manager
netapp/e-series_santricity_os_controller
11.0 - 11.70.1
netapp/hci_management_node
netapp/ontap_select_deploy_administration_utility
netapp/solidfire
Published
Jul 22, 2021
Tracked Since
Feb 18, 2026