Vulnerability · Published Aug 24, 2022 · Assigned by redhat
CVE-2021-3999
High 7.8
In plain English
A high-severity security flaw in glibc. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to memory corruption when the size of the buffer is exactly 1. A local attacker who can control the input buffer and size passed to getcwd() in a setuid program could use this flaw to potentially execute arbitrary code and escalate their privileges on the system.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | compat-libpthread-nonshared | 2.28-164.el8_5.3 | ALSA-2022:0896 |
| AlmaLinux:8 | glibc-benchtests | 2.28-164.el8_5.3 | ALSA-2022:0896 |
| AlmaLinux:8 | glibc-nss-devel | 2.28-164.el8_5.3 | ALSA-2022:0896 |
| AlmaLinux:8 | glibc-static | 2.28-164.el8_5.3 | ALSA-2022:0896 |
| AlmaLinux:8 | glibc-utils | 2.28-164.el8_5.3 | ALSA-2022:0896 |
| AlmaLinux:8 | nss_hesiod | 2.28-164.el8_5.3 | ALSA-2022:0896 |
| Debian:12 | glibc | 2.33-4 | DEBIAN-CVE-2021-3999 |
| Debian:13 | glibc | 2.33-4 | DEBIAN-CVE-2021-3999 |
| Debian:14 | glibc | 2.33-4 | DEBIAN-CVE-2021-3999 |
| Rocky Linux:8 | glibc | 0:2.28-164.el8_5.3 | RLSA-2022:0896 |
Affected products (as reported)
Weakness: CWE-193 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- https://www.openwall.com/lists/oss-security/2022/01/24/4
- https://sourceware.org/bugzilla/show_bug.cgi?id=28769
- https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=23e0e8f5f1fb5ed150253d986ecccdc90c2dcd5e
- https://bugzilla.redhat.com/show_bug.cgi?id=2024637
- https://access.redhat.com/security/cve/CVE-2021-3999
- https://security-tracker.debian.org/tracker/CVE-2021-3999
- [debian-lts-announce] 20221017 [SECURITY] [DLA 3152-1] glibc security update mailing-list
- https://security.netapp.com/advisory/ntap-20221104-0001/
- https://cert-portal.siemens.com/productcert/html/ssa-831302.html
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html