CVE-2011-2168: OpenBSD

Medium severity, CVSS 5.0. EPSS: 1.1% chance of exploitation in the next 30 days.

Multiple integer overflows in the glob implementation in libc in OpenBSD before 4.9 might allow context-dependent attackers to have an unspecified impact via a crafted string, related to the GLOB_APPEND and GLOB_DOOFFS flags, a different issue than CVE-2011-0418.

Affected products

• OpenBSD OpenBSD: up to and including 4.8; version 2.0 only; version 2.1 only; version 2.2 only; version 2.3 only; version 2.4 only; …

Published 2011-05-24. Last modified 2026-06-16.