7.8
Élevée
CVE-2021-3999 A flaw was found in glibc
Description
A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to memory corruption when the size of the buffer is exactly 1. A local attacker who can control the input buffer and size passed to getcwd() in a setuid program could use this flaw to potentially execute arbitrary code and escalate their privileges on the system.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| glibc | Versions non publiées | |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
Autres CVE de glibc
Les 5 CVE de glibc →
CVE-2023-6780
An integer overflow was found in the __vsyslog_internal function of the glibc library
5.3
Moyenne
CVE-2023-6779
An off-by-one heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library
8.2
Élevée
CVE-2023-6246
A heap-based buffer overflow was found in the __vsyslog_internal function of the glibc library
8.4
Élevée
CVE-2021-3998
A flaw was found in glibc
7.5
Élevée