A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value potentially leading to information leakage and disclosure of sensitive data.

🗓️ 30 Aug 2022 07:00:00Reported by MicrosoftType

A flaw in the GNU C library realpath() may return an unexpected value, risking information leakage of sensitive data.

Reporter	Title	Published	Views	Family All 42
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data v5.0.3 is vulnerable to multiple Operator package issues	12 Dec 202416:58	–	ibm
IBM Security Bulletins	Security Bulletin: Execution Engine for Apache Hadoop is vulnerable to denial of service, buffer overflow and allow a local authenticated attacker to gain elevated privileges	15 Apr 202502:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.6.4 fixes multiple security vulnerabilities	15 Dec 202314:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge v4.8.7 is vulnerable to multiple Operator package issues	26 Mar 202503:42	–	ibm
CBLMariner	CVE-2021-3998 affecting package glibc for versions less than 2.35-7	14 May 202405:06	–	cbl_mariner
Cloud Foundry	USN-5310-1: GNU C Library vulnerabilities \| Cloud Foundry	18 May 202300:00	–	cloudfoundry
Circl	CVE-2021-3998	24 Aug 202220:22	–	circl
CNNVD	glibc 缓冲区错误漏洞	11 Jan 202200:00	–	cnnvd
CVE	CVE-2021-3998	24 Aug 202200:00	–	cve
Cvelist	CVE-2021-3998	24 Aug 202200:00	–	cvelist

Vulners

Node

30 Aug 2022 07:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.17.5

EPSS0.00146

SSVC