CVE-2021-3998

תיאור (מקור, אנגלית)

A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data.

מדדים

CVSS 3.1

7.5 (HIGH) מקור הציון: NVD CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS — סבירות ניצול

2% (אחוזון 100) נכון ל-14/10/2026

CWE

CWE-125, CWE-252

מוצרים מושפעים

gnu: glibc; netapp: ontap select deploy administration utility; netapp: h300s firmware; netapp: h300s; netapp: h500s firmware; netapp: h500s; netapp: h700s firmware; netapp: h700s; netapp: h410s firmware; netapp: h410s; netapp: h410c firmware; netapp: h410c

קישורים

• https://bugzilla.redhat.com/show_bug.cgi?id=2024633 Issue TrackingPatchThird Party Advisory
• https://sourceware.org/bugzilla/show_bug.cgi?id=28770 Issue TrackingPatchThird Party Advisory
• https://www.openwall.com/lists/oss-security/2022/01/24/4 Mailing ListPatchThird Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2024633 Issue TrackingPatchThird Party Advisory
• https://sourceware.org/bugzilla/show_bug.cgi?id=28770 Issue TrackingPatchThird Party Advisory
• https://www.openwall.com/lists/oss-security/2022/01/24/4 Mailing ListPatchThird Party Advisory
• https://access.redhat.com/security/cve/CVE-2021-3998 Third Party Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-3998 Third Party Advisory
• https://security.netapp.com/advisory/ntap-20221020-0003/ Third Party Advisory
• https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=84d2d0fe20bdf94feed82b21‮…