glibc 缓冲区错误漏洞

🗓️ 11 Jan 2022 00:00:00Reported by China National Vulnerability Database of Information SecurityType

cnnvd🔗 www.cnnvd.org.cn👁 19 Views

A security vulnerability in the GNU C Library causes an off-by-one buffer overflow in getcwd.

Reporter	Title	Published	Views	Family All 49
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data v5.0.3 is vulnerable to multiple Operator package issues	12 Dec 202416:58	–	ibm
IBM Security Bulletins	Security Bulletin: Execution Engine for Apache Hadoop is vulnerable to denial of service, buffer overflow and allow a local authenticated attacker to gain elevated privileges	15 Apr 202502:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.6.4 fixes multiple security vulnerabilities	15 Dec 202314:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge v4.8.7 is vulnerable to multiple Operator package issues	26 Mar 202503:42	–	ibm
BDU FSTEC	The vulnerability of the realpath() function in the glibc system library, which allows a hacker to access confidential information	31 Mar 202200:00	–	bdu_fstec
CBLMariner	CVE-2021-3998 affecting package glibc for versions less than 2.35-7	14 May 202405:06	–	cbl_mariner
Cloud Foundry	USN-5310-1: GNU C Library vulnerabilities \| Cloud Foundry	18 May 202300:00	–	cloudfoundry
Tenable Nessus	Rocky Linux 9.2 [CIQ] Security Update: compat-libpthread-nonshared / glibc / glibc-all-langpacks / etc Multiple Vulnerabilities (ciqsa-2026_1612)	12 Oct 202600:00	–	nessus
Tenable Nessus	GLSA-202208-24 : GNU C Library: Multiple Vulnerabilities	15 Aug 202200:00	–	nessus
Tenable Nessus	Siemens SIMATIC S7-1500 TM MFP BIOS Out-of-bounds Read (CVE-2021-3998)	25 Feb 202500:00	–	nessus

Source	Link
openwall	www.openwall.com/lists/oss-security/2022/01/24/4
sourceware	www.sourceware.org/git/gitweb.cgi
security-tracker	www.security-tracker.debian.org/tracker/CVE-2021-3998
security	www.security.netapp.com/advisory/ntap-20221020-0003/
sourceware	www.sourceware.org/bugzilla/show_bug.cgi
sourceware	www.sourceware.org/git/gitweb.cgi
sourceware	www.sourceware.org/git/gitweb.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
access	www.access.redhat.com/security/cve/CVE-2021-3998
sourceware	www.sourceware.org/git/gitweb.cgi

23 May 2026 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.5

EPSS0.02066

SSVC

gnu c library getcwd bug off by one buffer overflow