7.8
High
CVE-2021-3999 A flaw was found in glibc
Description
A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to memory corruption when the size of the buffer is exactly 1. A local attacker who can control the input buffer and size passed to getcwd() in a setuid program could use this flaw to potentially execute arbitrary code and escalate their privileges on the system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| glibc | Versions not published | |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
Other CVEs of glibc
The 5 CVEs of glibc →
CVE-2023-6780
An integer overflow was found in the __vsyslog_internal function of the glibc library
5.3
Medium
CVE-2023-6779
An off-by-one heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library
8.2
High
CVE-2023-6246
A heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library
8.4
High
CVE-2021-3998
A flaw was found in glibc
7.5
High