CVE-2021-35942: Integer Overflow
Last updated 24 July 2024
Other sources
The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parseparam (in posix/wordexp.c) when called with an untrusted, crafted pattern, potentially resulting in a denial of service or disclosure of information. This occurs because atoi was used but strtoul should have been used to ensure correct calculations.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2021-35942?
CVE-2021-35942 is a vulnerability in the GNU C Library (glibc) through version 2.33 that can result in a denial of service or disclosure of information.
What is the severity of CVE-2021-35942?
The severity of CVE-2021-35942 is critical with a CVSS score of 9.1.
How does CVE-2021-35942 affect GNU glibc?
CVE-2021-35942 affects GNU glibc through version 2.33 and may cause crashes or read arbitrary memory.
How can CVE-2021-35942 be exploited?
CVE-2021-35942 can be exploited by calling the wordexp function in GNU glibc with an untrusted, crafted pattern.
How can I fix CVE-2021-35942?
To fix CVE-2021-35942, update GNU glibc to a version beyond 2.33 when it becomes available.