logo
DATABASE RESOURCES PRICING ABOUT US

CVE-2021-3999

Description

A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to memory corruption when the size of the buffer is exactly 1. A local attacker who can control the input buffer and size passed to getcwd() in a setuid program could use this flaw to potentially execute arbitrary code and escalate their privileges on the system.


Affected Software


CPE Name Name Version
gnu:glibc gnu glibc 2.31
debian:debian_linux debian debian linux 10.0
debian:debian_linux debian debian linux 11.0
netapp:ontap_select_deploy_administration_utility netapp ontap select deploy administration utility -
netapp:e-series_performance_analyzer netapp e-series performance analyzer -
netapp:nfs_plug-in netapp nfs plug-in *
netapp:h300s_firmware netapp h300s firmware -
netapp:h500s_firmware netapp h500s firmware -
netapp:h700s_firmware netapp h700s firmware -
netapp:h410s_firmware netapp h410s firmware -
netapp:h410c_firmware netapp h410c firmware -

Related