CVE-2021-3999

EUVD-2021-27189
A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to memory corruption when the size of the buffer is exactly 1. A local attacker who can control the input buffer and size passed to getcwd() in a setuid program could use this flaw to potentially execute arbitrary code and escalate their privileges on the system.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA-ADPADP
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 73%
Affected Products (NVD)
VendorProductVersion
gnuglibc
𝑥
< 2.31
debiandebian_linux
10.0
debiandebian_linux
11.0
debiandebian_linux
10.0
netappe-series_performance_analyzer
-
netappnfs_plug-in
*
netappontap_select_deploy_administration_utility
-
netapph300s_firmware
-
netapph500s_firmware
-
netapph700s_firmware
-
netapph410s_firmware
-
netapph410c_firmware
-
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
glibc
bookworm
2.36-9+deb12u8
fixed
bookworm (security)
2.36-9+deb12u7
fixed
bullseye
2.31-13+deb11u11
fixed
bullseye (security)
2.31-13+deb11u10
fixed
sid
2.40-3
fixed
trixie
2.40-3
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
eglibc
bionic
dne
focal
dne
hirsute
dne
impish
dne
jammy
dne
kinetic
dne
lunar
dne
mantic
dne
noble
dne
trusty
Fixed 2.19-0ubuntu6.15+esm3
released
xenial
dne
glibc
bionic
Fixed 2.27-3ubuntu1.5
released
focal
Fixed 2.31-0ubuntu9.7
released
hirsute
ignored
impish
Fixed 2.34-0ubuntu3.2
released
jammy
not-affected
kinetic
not-affected
lunar
not-affected
mantic
not-affected
noble
not-affected
xenial
Fixed 2.23-0ubuntu11.3+esm1
released
Common Weakness Enumeration
References
https://access.redhat.com/security/cve/CVE-2021-3999
https://bugzilla.redhat.com/show_bug.cgi?id=2024637
https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html
https://security-tracker.debian.org/tracker/CVE-2021-3999
https://security.netapp.com/advisory/ntap-20221104-0001/
https://sourceware.org/bugzilla/show_bug.cgi?id=28769
https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=23e0e8f5f1fb5ed150253d986ecccdc90c2dcd5e
https://www.openwall.com/lists/oss-security/2022/01/24/4
https://access.redhat.com/security/cve/CVE-2021-3999
https://bugzilla.redhat.com/show_bug.cgi?id=2024637
https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html
https://security-tracker.debian.org/tracker/CVE-2021-3999
https://security.netapp.com/advisory/ntap-20221104-0001/
https://sourceware.org/bugzilla/show_bug.cgi?id=28769
https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=23e0e8f5f1fb5ed150253d986ecccdc90c2dcd5e
https://www.openwall.com/lists/oss-security/2022/01/24/4