CVE-2021-3997

2022-01-1000:00:00

ubuntu.com

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

1.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

22.1%

JSON

A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles
may lead to a denial of service at boot time when too many nested
directories are created in /tmp.

Notes

Author	Note
alexmurray	This vulnerability does not appear to be exploitable for systemd versions before v242 (ie before commit e535840) and onwards hence this is not possible to be exploited on Ubuntu 18.04 LTS and earlier.

OSVersionArchitecturePackageVersionFilename
ubuntu20.04noarchsystemd< 245.4-4ubuntu3.15UNKNOWN
ubuntu21.04noarchsystemd< 247.3-3ubuntu3.7UNKNOWN
ubuntu21.10noarchsystemd< 248.3-1ubuntu8.2UNKNOWN