CVE-2021-3800

Опубликовано: 23 авг. 2022

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition.

Ссылки

https://access.redhat.com/security/cve/CVE-2021-3800
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1938284
Issue Tracking
Patch
Third Party Advisory
https://gitlab.gnome.org/GNOME/glib/-/commit/3529bb4450a51995
Patch
Vendor Advisory
https://lists.debian.org/debian-lts-announce/2022/09/msg00020.html
Mailing List
Third Party Advisory
https://security.netapp.com/advisory/ntap-20221028-0004/
Third Party Advisory
https://www.openwall.com/lists/oss-security/2017/06/23/8
Exploit
Mailing List
Patch
Third Party Advisory
https://access.redhat.com/security/cve/CVE-2021-3800
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1938284
Issue Tracking
Patch
Third Party Advisory
https://gitlab.gnome.org/GNOME/glib/-/commit/3529bb4450a51995
Patch
Vendor Advisory
https://lists.debian.org/debian-lts-announce/2022/09/msg00020.html
Mailing List
Third Party Advisory
https://security.netapp.com/advisory/ntap-20221028-0004/
Third Party Advisory
https://www.openwall.com/lists/oss-security/2017/06/23/8
Exploit
Mailing List
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:*

Версия до 2.62.5 (исключая)

cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:*

Версия от 2.63.0 (включая) до 2.63.6 (исключая)

Конфигурация 2

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*

EPSS

Процентиль: 18%

0.00056

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-200

CWE-552

Связанные уязвимости

CVE-2021-3800

CVSS3: 5.5

ubuntu

больше 3 лет назад

A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition.

CVE-2021-3800

CVSS3: 5.5

redhat

почти 5 лет назад

A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition.

CVE-2021-3800

CVSS3: 5.5

msrc

больше 3 лет назад

A flaw was found in glib before version 2.63.6. Due to random charset alias pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition.

CVE-2021-3800

CVSS3: 5.5

debian

больше 3 лет назад

A flaw was found in glib before version 2.63.6. Due to random charset ...

SUSE-SU-2022:0828-1

suse-cvrf

почти 4 года назад

Security update for glib2

EPSS

Процентиль: 18%

0.00056

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-200

CWE-552