{"id":"CVE-2021-3800","aliases":["ALSA-2021:4385","CLSA-2021-1640697102","CLSA-2022-1642083911","CLSA-2022-1642084196","CLSA-2022-1645466687","DEBIAN-CVE-2021-3800","DLA-3110-1","EUVD-2021-27060","GHSA-58w9-h6f7-f979","JLSEC-2025-159","RHSA-2021:4385","RLSA-2021:4385","SUSE-SU-2022:0828-1","UBUNTU-CVE-2021-3800","USN-5189-1"],"status":"published","title":"A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak...","description":"A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.00565,"percentile":0.47455,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200","CWE-552"],"published":"2021-11-02T00:59:00Z","modified":"2026-10-29T11:01:28Z","fixes":[{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libglib2.0-0","fixed_in":["2.48.2-0ubuntu4.8+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libglib2.0-0-refdbg","fixed_in":["2.48.2-0ubuntu4.8+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libglib2.0-bin","fixed_in":["2.48.2-0ubuntu4.8+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libglib2.0-data","fixed_in":["2.48.2-0ubuntu4.8+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libglib2.0-dev","fixed_in":["2.48.2-0ubuntu4.8+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libglib2.0-doc","fixed_in":["2.48.2-0ubuntu4.8+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libglib2.0-tests","fixed_in":["2.48.2-0ubuntu4.8+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"glib2","fixed_in":["2.28.8-12.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"glib2-devel","fixed_in":["2.28.8-12.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"glib2-doc","fixed_in":["2.28.8-12.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"glib2-static","fixed_in":["2.28.8-12.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"glib2","fixed_in":["2.28.8-12.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"glib2-devel","fixed_in":["2.28.8-12.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"glib2-doc","fixed_in":["2.28.8-12.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"glib2-static","fixed_in":["2.28.8-12.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"glib2.0","fixed_in":["2.64.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"glib2.0","fixed_in":["2.64.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"glib2.0","fixed_in":["2.64.0-1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"glib2.0","fixed_in":["2.58.3-2+deb10u4"],"sources":["osv"]},{"ecosystem":"Julia","package":"Glib_jll","fixed_in":["2.68.1+0"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"glib2","fixed_in":["2.48.2-12.25.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"glib2","fixed_in":["2.48.2-12.25.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"glib2","fixed_in":["2.48.2-12.25.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"glib2","fixed_in":["2.48.2-12.25.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"glib2.0","fixed_in":["2.40.2-0ubuntu1.1+esm4"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"glib2.0","fixed_in":["2.48.2-0ubuntu4.8+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"glib2.0","fixed_in":["2.56.4-0ubuntu0.18.04.9"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"glib2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.56.4-156.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"glib2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.56.4-156.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libglib2.0-0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.2-0ubuntu4.8+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libglib2.0-0-refdbg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.2-0ubuntu4.8+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libglib2.0-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.2-0ubuntu4.8+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libglib2.0-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.2-0ubuntu4.8+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libglib2.0-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.2-0ubuntu4.8+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libglib2.0-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.2-0ubuntu4.8+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libglib2.0-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.2-0ubuntu4.8+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.8-12.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"glib2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.8-12.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"glib2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.8-12.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"glib2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.8-12.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.8-12.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"glib2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.8-12.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"glib2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.8-12.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"glib2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.8-12.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.56.4-10.el8.4.1.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"glib2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.56.4-10.el8.4.1.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"glib2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.56.4-10.el8.4.1.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"glib2-fam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.56.4-10.el8.4.1.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"glib2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.56.4-10.el8.4.1.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"glib2-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.56.4-10.el8.4.1.tuxcare.els1"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"glib2.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.64.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"glib2.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.64.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"glib2.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.64.0-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"glib2.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.58.3-2+deb10u4"}]}],"versions":["2.58.3-2","2.58.3-2+deb10u1","2.58.3-2+deb10u2","2.58.3-2+deb10u3"]},{"source":"osv","ecosystem":"Julia","package":"Glib_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.68.1+0"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.56.4-156.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glib2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.56.4-156.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glib2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.56.4-156.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glib2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.56.4-156.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glib2-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.56.4-156.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glib2-fam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.56.4-156.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glib2-fam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.56.4-156.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glib2-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.56.4-156.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"glib2-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.56.4-156.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"glib2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.56.4-156.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"glib2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.56.4-156.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"glib2-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.56.4-156.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"glib2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.56.4-156.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"glib2-fam-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.56.4-156.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"glib2-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.56.4-156.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"glib2-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.56.4-156.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.56.4-156.el8"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.2-12.25.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.2-12.25.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.2-12.25.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"glib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.2-12.25.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"glib2.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40.2-0ubuntu1.1+esm4"}]}],"versions":["2.38.0-1ubuntu1","2.38.1-1","2.39.1-0ubuntu1","2.39.1-0ubuntu2","2.39.1-0ubuntu3","2.39.2-0ubuntu1","2.39.2-0ubuntu2","2.39.3-0ubuntu4","2.39.4-0ubuntu1","2.39.90-0ubuntu1","2.39.91-0ubuntu2","2.39.91-0ubuntu3","2.39.92-2","2.40.0-1","2.40.0-1ubuntu1","2.40.0-2","2.40.2-0ubuntu1","2.40.2-0ubuntu1.1","2.40.2-0ubuntu1.1+esm1","2.40.2-0ubuntu1.1+esm2","2.40.2-0ubuntu1.1+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"glib2.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.2-0ubuntu4.8+esm1"}]}],"versions":["2.46.1-1","2.46.1-2","2.47.1-1","2.47.3-3","2.47.4-1","2.47.5-1","2.47.6-1","2.48.0-1ubuntu3","2.48.0-1ubuntu4","2.48.1-1~ubuntu16.04.1","2.48.2-0ubuntu1","2.48.2-0ubuntu3","2.48.2-0ubuntu4","2.48.2-0ubuntu4.1","2.48.2-0ubuntu4.2","2.48.2-0ubuntu4.3","2.48.2-0ubuntu4.4","2.48.2-0ubuntu4.5","2.48.2-0ubuntu4.6","2.48.2-0ubuntu4.7","2.48.2-0ubuntu4.8"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"glib2.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.56.4-0ubuntu0.18.04.9"}]}],"versions":["2.54.1-1ubuntu1","2.55.2-2ubuntu1","2.56.0-2ubuntu1","2.56.0-4ubuntu1","2.56.1-2ubuntu1","2.56.2-0ubuntu0.18.04.1","2.56.2-0ubuntu0.18.04.2","2.56.3-0ubuntu0.18.04.1","2.56.4-0ubuntu0.18.04.2","2.56.4-0ubuntu0.18.04.3","2.56.4-0ubuntu0.18.04.4","2.56.4-0ubuntu0.18.04.5","2.56.4-0ubuntu0.18.04.6","2.56.4-0ubuntu0.18.04.7","2.56.4-0ubuntu0.18.04.8"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"glib2.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.40.2-0ubuntu1.1+esm4"}]}],"versions":["2.38.0-1ubuntu1","2.38.1-1","2.39.1-0ubuntu1","2.39.1-0ubuntu2","2.39.1-0ubuntu3","2.39.2-0ubuntu1","2.39.2-0ubuntu2","2.39.3-0ubuntu4","2.39.4-0ubuntu1","2.39.90-0ubuntu1","2.39.91-0ubuntu2","2.39.91-0ubuntu3","2.39.92-2","2.40.0-1","2.40.0-1ubuntu1","2.40.0-2","2.40.2-0ubuntu1","2.40.2-0ubuntu1.1","2.40.2-0ubuntu1.1+esm1","2.40.2-0ubuntu1.1+esm2","2.40.2-0ubuntu1.1+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"glib2.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.48.2-0ubuntu4.8+esm1"}]}],"versions":["2.46.1-1","2.46.1-2","2.47.1-1","2.47.3-3","2.47.4-1","2.47.5-1","2.47.6-1","2.48.0-1ubuntu3","2.48.0-1ubuntu4","2.48.1-1~ubuntu16.04.1","2.48.2-0ubuntu1","2.48.2-0ubuntu3","2.48.2-0ubuntu4","2.48.2-0ubuntu4.1","2.48.2-0ubuntu4.2","2.48.2-0ubuntu4.3","2.48.2-0ubuntu4.4","2.48.2-0ubuntu4.5","2.48.2-0ubuntu4.6","2.48.2-0ubuntu4.7","2.48.2-0ubuntu4.8"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"glib2.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.56.4-0ubuntu0.18.04.9"}]}],"versions":["2.54.1-1ubuntu1","2.55.2-2ubuntu1","2.56.0-2ubuntu1","2.56.0-4ubuntu1","2.56.1-2ubuntu1","2.56.2-0ubuntu0.18.04.1","2.56.2-0ubuntu0.18.04.2","2.56.3-0ubuntu0.18.04.1","2.56.4-0ubuntu0.18.04.2","2.56.4-0ubuntu0.18.04.3","2.56.4-0ubuntu0.18.04.4","2.56.4-0ubuntu0.18.04.5","2.56.4-0ubuntu0.18.04.6","2.56.4-0ubuntu0.18.04.7","2.56.4-0ubuntu0.18.04.8"]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"gnome","product":"glib"},{"vendor":"netapp","product":"active_iq_unified_manager"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1938284","tags":["x_transferred","Issue Tracking","Patch","Third Party Advisory","fix","web","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3800","tags":["x_transferred","Third Party Advisory","advisory","web","report"]},{"url":"https://www.openwall.com/lists/oss-security/2017/06/23/8","tags":["x_transferred","Exploit","Mailing List","Patch","Third Party Advisory","fix","web","report"]},{"url":"https://gitlab.gnome.org/GNOME/glib/-/commit/3529bb4450a51995","tags":["x_transferred","Patch","Vendor Advisory","fix","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/09/msg00020.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://security.netapp.com/advisory/ntap-20221028-0004/","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3800","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-58w9-h6f7-f979"},{"url":"https://vulners.com/cve/CVE-2021-28153","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2021-3800","tags":["report"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2021-1640697102","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2022-1642083911.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2022-1642084196.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2022-1645466687.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-3800","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4385","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1938291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1948988","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1971533","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4385.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3800","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-28153","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-28153","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-28153","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2021:4385","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20220828-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1191489","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3800","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2021-3800","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5189-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-3800","description":"A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition.","status":"published","published":"2022-08-23T00:00:00Z","modified":"2024-08-03T17:09:08.749Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:33:04.020035Z"}],"euvd":[{"id":"EUVD-2021-27060","description":"A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition.","status":"published","published":"2022-08-23T00:00:00Z","modified":"2024-08-03T17:09:08Z","updated_at":"2026-11-03T03:25:11.953192Z"}],"ghsa":[{"id":"GHSA-58w9-h6f7-f979","title":"A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak...","description":"A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition.","status":"published","published":"2022-08-24T00:00:29Z","modified":"2023-01-30T05:02:53Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-200","CWE-552"],"updated_at":"2026-11-02T14:46:44.129156Z"}],"nvd":[{"id":"CVE-2021-3800","description":"A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition.","status":"published","published":"2022-08-23T16:15:09.98Z","modified":"2026-06-17T04:05:47.593Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200","CWE-552"],"updated_at":"2026-11-02T14:07:06.906968Z"}],"osv":[{"id":"CVE-2021-3800","description":"A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition.","status":"published","published":"2022-08-23T16:15:09.98Z","modified":"2026-10-24T10:50:42.523078355Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:20.843843Z"},{"id":"DEBIAN-CVE-2021-3800","description":"A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition.","status":"published","published":"2022-08-23T16:15:09.98Z","modified":"2026-10-23T18:03:27.108304624Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:35.521549Z"},{"id":"JLSEC-2025-159","title":"A flaw was found in glib before version 2.63.6","description":"A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition.","status":"published","published":"2025-10-19T22:31:43.957Z","modified":"2026-07-18T00:00:21.172720454Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:47:17.805107Z"},{"id":"RHSA-2021:4385","title":"Red Hat Security Advisory: glib2 security and bug fix update","status":"published","published":"2024-09-16T05:49:30Z","modified":"2026-10-15T10:02:09Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RLSA-2021:4385","title":"Moderate: glib2 security and bug fix update","description":"GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.\n\nSecurity Fix(es):\n\n* glib2: Possible privilege escalation thourgh pkexec and aliases (CVE-2021-3800)\n\n* glib: g_file_replace() with G_FILE_CREATE_REPLACE_DESTINATION creates empty target for dangling symlink (CVE-2021-28153)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.5 Release Notes linked from the References section.","status":"published","published":"2021-11-09T09:16:02Z","modified":"2026-02-05T00:45:06.218259Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2021-3800","description":"A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition.","status":"published","published":"2021-11-02T00:59:00Z","modified":"2026-04-22T12:58:05.118829Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:28.526929Z"},{"id":"ALSA-2021:4385","title":"Moderate: glib2 security and bug fix update","description":"GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures.\n\nSecurity Fix(es):\n\n* glib2: Possible privilege escalation thourgh pkexec and aliases (CVE-2021-3800)\n\n* glib: g_file_replace() with G_FILE_CREATE_REPLACE_DESTINATION creates empty target for dangling symlink (CVE-2021-28153)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2021-11-09T09:16:02Z","modified":"2026-10-29T11:01:28.703356492Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"CLSA-2021-1640697102","title":"Fix CVE(s): CVE-2021-3800","description":"\n   * SECURITY UPDATE: Privilege Escalation\n     - debian/patches/CVE-2021-3800.patch: Drop a redundant environment\n       variable in _g_locale_get_charset_aliases function at\n       libcharset/localcharset.c.\n     - CVE-2021-3800","status":"published","published":"2021-12-28T13:11:42Z","modified":"2026-06-04T10:03:19.25429Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2022-1642083911","title":"Fixed CVE-2021-3800 in glib2","description":"- CVE-2021-3800: Fix privilege escalation","status":"published","published":"2022-01-13T14:25:11Z","modified":"2026-06-01T00:33:24.19472796Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2022-1642084196","title":"Fix of CVE: CVE-2021-3800","description":"- CVE-2021-3800: Fix privilege escalation","status":"published","published":"2022-01-13T14:29:56Z","modified":"2026-06-01T00:33:15.40517838Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2022-1645466687","title":"Fix of CVE: CVE-2021-28153, CVE-2021-3800","description":"- CVE-2021-28153: g_file_replace() with G_FILE_CREATE_REPLACE_DESTINATION creates empty target for dangling symlink (#1939118)\n- CVE-2021-3800: Possible privilege escalation thourgh pkexec and aliases (#1938284)","status":"published","published":"2022-02-21T18:04:47Z","modified":"2026-06-01T00:33:19.089954351Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"DLA-3110-1","title":"glib2.0 - security update","status":"published","published":"2022-09-15T00:00:00Z","modified":"2026-03-09T01:20:51.65833Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"SUSE-SU-2022:0828-1","title":"Security update for glib2","description":"This update for glib2 fixes the following issues:\n\n- CVE-2021-3800: Fixed a file content leak in pkexec due to charset aliases (bsc#1191489).\n","status":"published","published":"2022-03-14T16:24:58Z","modified":"2026-02-04T02:46:02.185927Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"USN-5189-1","title":"A security issue was fixed in GLib","description":"It was discovered that GLib incorrectly handled certain environment variables.\nAn attacker could possibly use this issue to escalate privileges.\n","status":"published","published":"2021-12-13T19:48:07Z","modified":"2026-06-29T13:49:35.113284612Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}