CVE-2021-3998

    Dashboard / Vulnerabilities / CVE-2021-3998

    CVE-2021-3998

    Published: 24 Aug 2022Last Modified: 28 Aug 2026

    Summary:

    Details: A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data.

    References: https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=84d2d0fe20bdf94feed82b21b4d7d136db471f03, https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=ee8d5e33adb284601c00c94687bc907e10aec9bb, https://access.redhat.com/security/cve/CVE-2021-3998, https://security-tracker.debian.org/tracker/CVE-2021-3998, https://security.netapp.com/advisory/ntap-20221020-0003/, https://bugzilla.redhat.com/show_bug.cgi?id=2024633, https://sourceware.org/bugzilla/show_bug.cgi?id=28770, https://www.openwall.com/lists/oss-security/2022/01/24/4

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 9826b03b747b841f5fc6de2054bf1ef3f5c4bdf3
    Fixed -f94f6d8a3572840d3ba42ab9ace3ea522c99c0c2

    Affected versions

    glibc-2.34
    glibc-2.34.9000

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2021-3998 | CVE-DB