A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data.
References
| Link | Resource |
|---|---|
| https://access.redhat.com/security/cve/CVE-2021-3998 | Third Party Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=2024633 | Issue Tracking Patch Third Party Advisory |
| https://security-tracker.debian.org/tracker/CVE-2021-3998 | Third Party Advisory |
| https://security.netapp.com/advisory/ntap-20221020-0003/ | Third Party Advisory |
| https://sourceware.org/bugzilla/show_bug.cgi?id=28770 | Issue Tracking Patch Third Party Advisory |
| https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=84d2d0fe20bdf94feed82b21b4d7d136db471f03 | |
| https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=ee8d5e33adb284601c00c94687bc907e10aec9bb | |
| https://www.openwall.com/lists/oss-security/2022/01/24/4 | Mailing List Patch Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
| AND |
|
Configuration 4 (hide)
| AND |
|
Configuration 5 (hide)
| AND |
|
Configuration 6 (hide)
| AND |
|
Configuration 7 (hide)
| AND |
|
History
08 Nov 2022, 02:25
| Type | Values Removed | Values Added |
|---|---|---|
| References | (CONFIRM) https://security.netapp.com/advisory/ntap-20221020-0003/ - Third Party Advisory | |
| CPE | cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:* |
20 Oct 2022, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-125 | |
| References |
|
02 Sep 2022, 16:14
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-252 | |
| CPE | cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| References | (MISC) https://access.redhat.com/security/cve/CVE-2021-3998 - Third Party Advisory | |
| References | (MISC) https://security-tracker.debian.org/tracker/CVE-2021-3998 - Third Party Advisory | |
| References | (MISC) https://sourceware.org/bugzilla/show_bug.cgi?id=28770 - Issue Tracking, Patch, Third Party Advisory | |
| References | (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=2024633 - Issue Tracking, Patch, Third Party Advisory | |
| References | (MISC) https://www.openwall.com/lists/oss-security/2022/01/24/4 - Mailing List, Patch, Third Party Advisory | |
| References | (MISC) https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=ee8d5e33adb284601c00c94687bc907e10aec9bb - Mailing List, Patch, Third Party Advisory | |
| References | (MISC) https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=84d2d0fe20bdf94feed82b21b4d7d136db471f03 - Mailing List, Patch, Third Party Advisory |
24 Aug 2022, 16:24
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-08-24 16:15
Updated : 2024-02-04 22:51
NVD link : CVE-2021-3998
Mitre link : CVE-2021-3998
CVE.ORG link : CVE-2021-3998
JSON object : View
Products Affected
netapp
- h300s
- h410c_firmware
- h300s_firmware
- h410c
- h500s
- h500s_firmware
- ontap_select_deploy_administration_utility
- h700s_firmware
- h700s
- h410s
- h410s_firmware
gnu
- glibc