CVEvulnerability
CVE-2021-3800
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-08-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-200, CWE-552
Description
A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition.
Affected configurations
• gnome glib (< 2.62.5)
• gnome glib (>= 2.63.0 < 2.63.6)
• debian debian linux 10.0
• netapp active iq unified manager
Related
References
- https://access.redhat.com/security/cve/CVE-2021-3800 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1938284 Issue Tracking, Patch, Third Party Advisory
- https://gitlab.gnome.org/GNOME/glib/-/commit/3529bb4450a51995 Patch, Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2022/09/msg00020.html Mailing List, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20221028-0004/ Third Party Advisory
- https://www.openwall.com/lists/oss-security/2017/06/23/8 Exploit, Mailing List, Patch, Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2021-3800 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1938284 Issue Tracking, Patch, Third Party Advisory
- https://gitlab.gnome.org/GNOME/glib/-/commit/3529bb4450a51995 Patch, Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2022/09/msg00020.html Mailing List, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20221028-0004/ Third Party Advisory
- https://www.openwall.com/lists/oss-security/2017/06/23/8 Exploit, Mailing List, Patch, Third Party Advisory