The wordexp function in GNU C Library (aka glibc) 2.21 does not enforce the WRDE_NOCMD flag, which allows context-dependent attackers to execute arbitrary commands, as demonstrated by input containing "$((`...`))".
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade glibc-develUpgrade glibc-commonUpgrade glibc-staticUpgrade glibc-utilsUpgrade glibc-headersUpgrade glibcUpgrade nscd | Dec 1, 2016 | Nov 24, 2014 |
| Debian | — | Upgrade glibcUpgrade eglibc | Jul 30, 2024 | Nov 24, 2014 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 17, 2015 |
| Gentoo Linux | — | Upgrade sys-libs/glibc. | Oct 30, 2017 | Nov 24, 2014 |
| Oracle_linux | — | Upgrade glibc-headersUpgrade glibc-commonUpgrade nscdUpgrade glibc-utilsUpgrade glibc-develUpgrade glibc-staticUpgrade glibc | Oct 16, 2024 | Nov 24, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 20, 2014 |
| Suse | — | Upgrade glibc-devel-32bitUpgrade glibc-utilsUpgrade glibc-locale-baseUpgrade glibc-localeUpgrade pam-modules-32bitUpgrade glibc-develUpgrade glibc-i18ndataUpgrade glibc-locale-32bitUpgrade pwdutils-plugin-auditUpgrade libxcrypt-32bitUpgrade glibcUpgrade glibc-devel-staticUpgrade glibc-htmlUpgrade glibc-langUpgrade nscdUpgrade glibc-infoUpgrade glibc-profile-x86Upgrade glibc-profile-32bitUpgrade glibc-locale-base-32bitUpgrade glibc-profileUpgrade pam-modulesUpgrade pwdutilsUpgrade glibc-x86Upgrade glibc-extraUpgrade glibc-32bitUpgrade glibc-locale-x86Upgrade libxcrypt | Dec 18, 2015 | Nov 24, 2014 |
| Ubuntu | — | Upgrade libc6 | Nov 8, 2024 | Nov 24, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub