The vulnerability of the realpath() function in the glibc system library, which allows a hacker to access confidential information

🗓️ 31 Mar 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

The GNU C library realpath vulnerability causes release errors that allow remote access to confidential data.

Reporter	Title	Published	Views	Family All 43
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data v5.0.3 is vulnerable to multiple Operator package issues	12 Dec 202416:58	–	ibm
IBM Security Bulletins	Security Bulletin: Execution Engine for Apache Hadoop is vulnerable to denial of service, buffer overflow and allow a local authenticated attacker to gain elevated privileges	15 Apr 202502:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.6.4 fixes multiple security vulnerabilities	15 Dec 202314:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge v4.8.7 is vulnerable to multiple Operator package issues	26 Mar 202503:42	–	ibm
CBLMariner	CVE-2021-3998 affecting package glibc for versions less than 2.35-7	14 May 202405:06	–	cbl_mariner
Cloud Foundry	USN-5310-1: GNU C Library vulnerabilities \| Cloud Foundry	18 May 202300:00	–	cloudfoundry
Circl	CVE-2021-3998	24 Aug 202220:22	–	circl
CNNVD	glibc 缓冲区错误漏洞	11 Jan 202200:00	–	cnnvd
CVE	CVE-2021-3998	24 Aug 202200:00	–	cve
Cvelist	CVE-2021-3998	24 Aug 202200:00	–	cvelist

Vulners

Node

gnu glibcRange2.0–2.34.9000

OR

canonical ubuntuMatch21.10

Source	Link
redos	www.redos.red-soft.ru/support/secure/
ubuntu	www.ubuntu.com/security/notices/USN-5310-1
goslinux	www.goslinux.fssp.gov.ru/2726972/
web	www.web.nvd.nist.gov/view/vuln/detail

30 May 2022 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 26.4

CVSS 36.5

EPSS0.01392

GNU C library realpath vulnerability memory release errors remote attacker confidential data