All vulnerabilities

Servers and applications

CVE-2021-3998

A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data.

Severity
High 7.5
Published
24 Aug 2022
Last changed
14 Oct 2026
Added to UpHeron
1 Nov 2026
Fixed in
2.35
Sources
NVD

Affected software

SoftwareAffected versions
GNU C LibraryServers and applications · cpe:a:gnu:glibc
  • From 2.33 before 2.35

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-3998
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-3998