A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to memory corruption when the size of the buffer is exactly 1. A local attacker who can control the input buffer and size passed to getcwd() in a setuid program could use this flaw to potentially execute arbitrary code and escalate their privileges on the system.

🗓️ 31 Aug 2022 07:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 7 Views

glibc getcwd off-by-one error when buffer is 1; attacker in setuid program can escalate privileges.

Reporter	Title	Published	Views	Family All 161
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a buffer overflow and underflow in GNU C Library (CVE-2021-3999)	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues	1 Mar 202417:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a buffer overflow in GNU glibc (CVE-2021-3999)	1 Feb 202315:45	–	ibm
IBM Security Bulletins	Security Bulletin: glibc vulnerability affects IBM Elastic Storage System (CVE-2021-3999)	29 Aug 202211:18	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.8 addresses multiple security vulnerabilities.	11 Apr 202311:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	30 Jan 202617:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Application Framework Base Image is vulnerable to using components with Known Vulnerabilities	26 Jul 202214:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® REST	20 May 202423:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security is vulnerable to using components with known vulnerabilities	28 Oct 202219:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and IBM supplied MQ Advanced container images are vulnerable to multiple issues from Red Hat UBI packages and the IBM WebSphere Application Server Liberty	16 May 202208:18	–	ibm

Vulners

Node

microsoft cm1_glibc_2.28-24Range<2.28-24

31 Aug 2022 07:00Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.8

EPSS0.00735

SSVC

glibc getcwd off by one buffer overflow buffer underflow local attacker privilege escalation