Debian/glibc: high 7.5
Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the we_wordv member, which on
Action: Upgrade glibc to 2.41-12+deb13u2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.41-12+deb13u2 | - |
Fixed versions
| 2.41-12+deb13u2 |
Sources
- osv: DEBIAN-CVE-2025-15281#Debian:13/glibc
- https://security-tracker.debian.org/tracker/CVE-2025-15281
published · modified · JSON