Description
A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a glibc
Affects glibc v2.33 and above.affected
References
- https://www.openwall.com/lists/oss-security/2022/01/24/4 ↗
- https://sourceware.org/bugzilla/show_bug.cgi?id=28770 ↗
- https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=ee8d5e33adb284601c00c94687bc907e10aec9bb ↗
- https://sourceware.org/git/gitweb.cgi?p=glibc.git%3Bh=84d2d0fe20bdf94feed82b21b4d7d136db471f03 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=2024633 ↗
- https://access.redhat.com/security/cve/CVE-2021-3998 ↗
- https://security-tracker.debian.org/tracker/CVE-2021-3998 ↗
- https://security.netapp.com/advisory/ntap-20221020-0003/ ↗
- https://cert-portal.siemens.com/productcert/html/ssa-831302.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html ↗