CVE-2021-3998CWE-125CWE-252

CVE-2021-3998

High · published August 24, 2022

CVSS v3.1
7.5
EPSS
2%
Percentile
82.4
In the wild
Unconfirmed
What it is

A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.02204 · 82.4th percentile
Weaknesses
CWE-125 · Out-of-bounds Read; CWE-252 · Unchecked Return Value
Published
2022-08-24T20:15Z
Affected products (7)
ProductVersionsFixed in
gnu/glibc≥ 2.33, < 2.352.35
netapp/ontap_select_deploy_administration_utilityall versions—
netapp/h300s_firmwareall versions—
netapp/h500s_firmwareall versions—
netapp/h700s_firmwareall versions—
netapp/h410s_firmwareall versions—
netapp/h410c_firmwareall versions—
References (18)
https://access.redhat.com/security/cve/CVE-2021-3998 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=2024633 · [email protected]https://security-tracker.debian.org/tracker/CVE-2021-3998 · [email protected]https://security.netapp.com/advisory/ntap-20221020-0003/ · [email protected]https://sourceware.org/bugzilla/show_bug.cgi?id=28770 · [email protected]https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=84d2d0fe20bdf94feed82b21b4d7d136db471f03 · [email protected]https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=ee8d5e33adb284601c00c94687bc907e10aec9bb · [email protected]https://www.openwall.com/lists/oss-security/2022/01/24/4 · [email protected]https://access.redhat.com/security/cve/CVE-2021-3998 · af854a3a-2127-422b-91ae-364da2661108https://bugzilla.redhat.com/show_bug.cgi?id=2024633 · af854a3a-2127-422b-91ae-364da2661108https://security-tracker.debian.org/tracker/CVE-2021-3998 · af854a3a-2127-422b-91ae-364da2661108https://security.netapp.com/advisory/ntap-20221020-0003/ · af854a3a-2127-422b-91ae-364da2661108https://sourceware.org/bugzilla/show_bug.cgi?id=28770 · af854a3a-2127-422b-91ae-364da2661108https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=84d2d0fe20bdf94feed82b21b4d7d136db471f03 · af854a3a-2127-422b-91ae-364da2661108https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=ee8d5e33adb284601c00c94687bc907e10aec9bb · af854a3a-2127-422b-91ae-364da2661108https://www.openwall.com/lists/oss-security/2022/01/24/4 · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-398330.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-831302.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 24 AUG 00:00Z
    A flaw was found in glibc
    cvelistv5