CVE-2021-3998

—

CVSS 3.1

7.5 high

EPSS

2%p76

Published

Aug 24, 2022 (Aug 24, 2022)

Modified

Jun 17, 2026

Description

A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data.

Vendors: gnu netapp
Products: glibc, ontap select deploy administration utility, h300s firmware, h500s firmware, h700s firmware, h410s firmware, h410c firmware
Weakness: CWE-125, CWE-252
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news2 stories

New Linux Privilege Escalation Flaw Uncovered in Snap Package Manager

The Hacker NewsFeb 18, 08:37 UTC · Feb 18, 2022Vulnerability CVE-2021-44731 CVE-2021-3995 CVE-2021-3996+4 CVEs

CVE-2021-44731 Linux privilege escalation bug affects Canonical's Snap Package Manager

Security AffairsFeb 18, 09:54 UTC · Feb 18, 2022Vulnerability CVE-2021-44731 CVE-2021-44730 CVE-2021-3996+4 CVEs