CVE-2021-3998

Published: 24/08/2022 Updated: 12/02/2023

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 0

It exists that the GNU C Library nscd daemon incorrectly handled certain netgroup lookups. An attacker could possibly use this issue to cause the GNU C Library to crash, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS. (CVE-2021-27645)

Vulnerable Product	Search on Vulmon	Subscribe to Product
gnu glibc
netapp ontap select deploy administration utility -
netapp h300s firmware -
netapp h500s firmware -
netapp h700s firmware -
netapp h410s firmware -
netapp h410c firmware -

Several security issues were fixed in GNU C Library ...

A flaw was found in glibc The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data ...

Critical Infrastructure Sectors: Critical Manufacturing

Hello Can someone clarify CVE-2021-44730 dependency on hardlinking? This passage: Why it isn't possible to copy the snap-confine binary into a directory for the same effect -- instead of hardlinking it? I cannot see how hardlink is different from a simple copy in this context Thanks! Feb 17, 2022, 19:47 by qsa () qualys com: ...

Qualys Security Advisory Oh Snap! More Lemmings (Local Privilege Escalation in snap-confine) ======================================================================== Contents ======================================================================== Summary Two minor bugs An unexploitable bug CVE-2021-44730: Hardlink attack in snap-confine's sc_o ...

Hi all, We discovered two vulnerabilities in the glibc, CVE-2021-3998 in realpath() and CVE-2021-3999 in getcwd() Patches are now available at (many thanks to Siddhesh Poyarekar and Red Hat Product Security): sourcewareorg/git/gitwebcgi?p=glibcgit;h=ee8d5e33adb284601c00c94687bc907e10aec9bb sourcewareorg/git/gitwebcgi?p=glibc ...

CWE-125 https://www.openwall.com/lists/oss-security/2022/01/24/4 https://access.redhat.com/security/cve/CVE-2021-3998 https://sourceware.org/bugzilla/show_bug.cgi?id=28770 https://security-tracker.debian.org/tracker/CVE-2021-3998 https://bugzilla.redhat.com/show_bug.cgi?id=2024633 https://security.netapp.com/advisory/ntap-20221020-0003/https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=ee8d5e33adb284601c00c94687bc907e10aec9bb https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=84d2d0fe20bdf94feed82b21b4d7d136db471f03 https://nvd.nist.gov https://ubuntu.com/security/notices/USN-5310-1 https://www.cisa.gov/news-events/ics-advisories/icsa-23-348-10

CVE-2021-3998

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

ICS Advisories

Mailing Lists

References

Vulmon Search

About

Products

Connect