A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data.
Fix
Patch, vendor advisory and mitigation references on NVD 6
- https://bugzilla.redhat.com/show_bug.cgi?id=2024633 Issue Tracking, Patch, Third Party Advisory
- https://sourceware.org/bugzilla/show_bug.cgi?id=28770 Issue Tracking, Patch, Third Party Advisory
- https://www.openwall.com/lists/oss-security/2022/01/24/4 Mailing List, Patch, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2024633 Issue Tracking, Patch, Third Party Advisory
- https://sourceware.org/bugzilla/show_bug.cgi?id=28770 Issue Tracking, Patch, Third Party Advisory
- https://www.openwall.com/lists/oss-security/2022/01/24/4 Mailing List, Patch, Third Party Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 7.5 · gnu, netappNVD modified 2026-10-14 10:17
Affected (CPE criteria) 7
cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*
References 18
- https://access.redhat.com/security/cve/CVE-2021-3998 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2024633 Issue Tracking, Patch, Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2021-3998 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20221020-0003/ Third Party Advisory
- https://sourceware.org/bugzilla/show_bug.cgi?id=28770 Issue Tracking, Patch, Third Party Advisory
- https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=84d2d0fe20bdf94feed82b21b4d7d136db471f03
- https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=ee8d5e33adb284601c00c94687bc907e10aec9bb
- https://www.openwall.com/lists/oss-security/2022/01/24/4 Mailing List, Patch, Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2021-3998 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2024633 Issue Tracking, Patch, Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2021-3998 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20221020-0003/ Third Party Advisory
- https://sourceware.org/bugzilla/show_bug.cgi?id=28770 Issue Tracking, Patch, Third Party Advisory
- https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=84d2d0fe20bdf94feed82b21b4d7d136db471f03
- https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=ee8d5e33adb284601c00c94687bc907e10aec9bb
- https://www.openwall.com/lists/oss-security/2022/01/24/4 Mailing List, Patch, Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
- https://cert-portal.siemens.com/productcert/html/ssa-831302.html