CVE-2021-3999

Katalog CVE

CVSS 7.8 · High EPSS 0,75%

Kerentanan Off-by-one Error pada gnu glibc, debian linux +8 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to memory corruption when the size of the buffer is exactly 1. A local attacker who can control the input buffer and size passed to getcwd() in a setuid program could use this flaw to potentially execute arbitrary code and escalate their privileges on the system.

Rincian

Terbit di NVD

24 Agustus 2022

Terakhir diubah

14 Oktober 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-193: Off-by-one Error

EPSS (30 hari)

0,75% peluang dieksploitasi; lebih tinggi dari 53,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/security/cve/CVE-2021-3999 advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=2024637 issue tracking · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html mailing list · advisory pihak ketiga
• https://security-tracker.debian.org/tracker/CVE-2021-3999 advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20221104-0001/ advisory pihak ketiga
• https://sourceware.org/bugzilla/show_bug.cgi?id=28769 issue tracking · advisory pihak ketiga
• https://www.openwall.com/lists/oss-security/2022/01/24/4 exploit · mailing list · advisory pihak ketiga
• https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=23e0e8f5f1fb5ed150253d986ecccdc90c2dcd5e
• https://cert-portal.siemens.com/productcert/html/ssa-398330.html
• https://cert-portal.siemens.com/productcert/html/ssa-831302.html