{"id":"CVE-2021-3998","aliases":["AZL-10675","DEBIAN-CVE-2021-3998","EUVD-2021-27188","GHSA-32pr-wg5j-9rwr","UBUNTU-CVE-2021-3998","USN-5310-1","openSUSE-SU-2024:11850-1"],"status":"published","title":"A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value,...","description":"A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.02269,"percentile":0.83275,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125","CWE-252"],"published":"2022-02-01T00:00:00Z","modified":"2026-10-24T10:30:16Z","fixes":[{"ecosystem":"Azure Linux:2","package":"glibc","fixed_in":["2.35-7"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"glibc","fixed_in":["2.33-4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"glibc","fixed_in":["2.33-4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"glibc","fixed_in":["2.33-4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35-7"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.33-4"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.33-4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.33-4"}]}]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27-3ubuntu1.5"}]}],"versions":["2.26-0ubuntu2","2.26-0ubuntu2.1","2.27-0ubuntu2","2.27-0ubuntu3","2.27-3ubuntu1","2.27-3ubuntu1.2","2.27-3ubuntu1.3","2.27-3ubuntu1.4"],"bundled":12},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.31-0ubuntu9.7"}]}],"versions":["2.30-0ubuntu2","2.30-0ubuntu3","2.31-0ubuntu5","2.31-0ubuntu6","2.31-0ubuntu7","2.31-0ubuntu9","2.31-0ubuntu9.1","2.31-0ubuntu9.2","2.31-0ubuntu9.3"],"bundled":12},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"glibc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.35-1.1"}]}],"bundled":4}],"products":[{"vendor":"gnu","product":"glibc"},{"vendor":"netapp","product":"h300s_firmware"},{"vendor":"netapp","product":"h410c_firmware"},{"vendor":"netapp","product":"h410s_firmware"},{"vendor":"netapp","product":"h500s_firmware"},{"vendor":"netapp","product":"h700s_firmware"},{"vendor":"netapp","product":"ontap_select_deploy_administration_utility"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"the gnu c library","product":"glibc"}],"references":[{"url":"https://www.openwall.com/lists/oss-security/2022/01/24/4","tags":["x_transferred","Mailing List","Patch","Third Party Advisory","fix"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=28770","tags":["x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=ee8d5e33adb284601c00c94687bc907e10aec9bb","tags":["x_transferred","web"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=84d2d0fe20bdf94feed82b21b4d7d136db471f03","tags":["x_transferred","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2024633","tags":["x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3998","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-3998","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20221020-0003/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-831302.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3998","tags":["web"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=84d2d0fe20bdf94feed82b21b4d7d136db471f03"},{"url":"https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=ee8d5e33adb284601c00c94687bc907e10aec9bb"},{"url":"https://security.netapp.com/advisory/ntap-20221020-0003"},{"url":"https://github.com/advisories/GHSA-32pr-wg5j-9rwr"},{"url":"https://ubuntu.com/security/CVE-2021-3998","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5310-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3998","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-10228","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-25013","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-6096","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-27618","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-29562","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3326","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3999","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-27645","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-35942","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-23218","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-23219","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3998","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-23218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-23219","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2021-3998","description":"A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data.","status":"published","published":"2022-08-24T00:00:00Z","modified":"2026-10-14T09:54:24.028Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"adp"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:33:04.020035Z"}],"euvd":[{"id":"EUVD-2021-27188","description":"A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data.","status":"published","published":"2022-08-24T00:00:00Z","modified":"2026-10-14T09:54:24Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T17:27:16.85534Z"}],"ghsa":[{"id":"GHSA-32pr-wg5j-9rwr","title":"A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value,...","description":"A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data.","status":"published","published":"2022-08-25T00:00:27Z","modified":"2026-10-14T12:32:29Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-125","CWE-252"],"updated_at":"2026-11-02T15:13:24.812204Z"}],"nvd":[{"id":"CVE-2021-3998","description":"A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data.","status":"published","published":"2022-08-24T16:15:09.01Z","modified":"2026-10-14T10:17:49.647Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-125","CWE-252"],"updated_at":"2026-11-02T14:07:06.906968Z"}],"osv":[{"id":"AZL-10675","title":"CVE-2021-3998 affecting package glibc for versions less than 2.35-7","description":"A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data.","status":"published","published":"2022-08-24T16:15:09Z","modified":"2026-04-21T04:21:20.796245Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:28:01.408755Z"},{"id":"CVE-2021-3998","description":"A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data.","status":"published","published":"2022-08-24T16:15:09.01Z","modified":"2026-10-24T10:30:16.972449179Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:21.249056Z"},{"id":"DEBIAN-CVE-2021-3998","description":"A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data.","status":"published","published":"2022-08-24T16:15:09.01Z","modified":"2026-10-15T09:47:42.324240983Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:35.521549Z"},{"id":"UBUNTU-CVE-2021-3998","description":"A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data.","status":"withdrawn","published":"2022-02-01T00:00:00Z","modified":"2026-02-04T02:40:33.757113Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:28.526929Z"},{"id":"openSUSE-SU-2024:11850-1","title":"glibc-2.35-1.1 on GA media","description":"These are all security issues fixed in the glibc-2.35-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:13:11.440885Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"USN-5310-1","title":"glibc vulnerabilities","description":"Jan Engelhardt, Tavis Ormandy, and others discovered that the GNU C Library\niconv feature incorrectly handled certain input sequences. An attacker\ncould possibly use this issue to cause the GNU C Library to hang or crash,\nresulting in a denial of service. This issue only affected Ubuntu 18.04 LTS\nand Ubuntu 20.04 LTS. (CVE-2016-10228, CVE-2019-25013, CVE-2020-27618,\nCVE-2020-29562, CVE-2021-3326)\n\nJason Royes and Samuel Dytrych discovered that the GNU C Library\nincorrectly handled signed comparisons on ARMv7 targets. A remote attacker\ncould use this issue to cause the GNU C Library to crash, resulting in a\ndenial of service, or possibly execute arbitrary code. This issue only\naffected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-6096)\n\nIt was discovered that the GNU C Library nscd daemon incorrectly handled\ncertain netgroup lookups. An attacker could possibly use this issue to\ncause the GNU C Library to crash, resulting in a denial of service. This\nissue only affected Ubuntu 20.04 LTS. (CVE-2021-27645)\n\nIt was discovered that the GNU C Library wordexp function incorrectly\nhandled certain patterns. An attacker could use this issue to cause the\nGNU C Library to crash, resulting in a denial of service, or possibly\nobtain sensitive information. This issue only affected Ubuntu 18.04 LTS and\nUbuntu 20.04 LTS. (CVE-2021-35942)\n\nIt was discovered that the GNU C Library realpath function incorrectly\nhandled return values. An attacker could possibly use this issue to obtain\nsensitive information. This issue only affected Ubuntu 21.10.\n(CVE-2021-3998)\n\nIt was discovered that the GNU C library getcwd function incorrectly\nhandled buffers. An attacker could use this issue to cause the GNU C\nLibrary to crash, resulting in a denial of service, or possibly execute\narbitrary code. (CVE-2021-3999)\n\nIt was discovered that the GNU C Library sunrpc module incorrectly handled\nbuffer lengths. An attacker could possibly use this issue to cause the GNU\nC Library to crash, resulting in a denial of service. (CVE-2022-23218,\nCVE-2022-23219)\n","status":"published","published":"2022-03-01T15:09:40Z","modified":"2026-04-27T19:17:38.57642754Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}