CVE-2021-3997

MediumCVSS 5.5/10Last modified Nov 2, 2026

Description

A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when too many nested directories are created in /tmp.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-674

Affected software

VendorProductVersions
n/asystemdFixed in v251-rc1
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIPLUS S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.0, < V3.1.5

References

Timeline

Published
Aug 23, 2022
Last modified
Nov 2, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-399707.5HwPCAssistant has a Improper Input Validation vulnerability.Successful exploitation of this vulnerability may create any file with the systeCVE-2021-399717.5Password vault has a External Control of System or Configuration Setting vulnerability.Successful exploitation of this vulnerability could cCVE-2021-399727.5MyHuawei-App has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnerability coCVE-2021-399737.5There is a Null pointer dereference in Smartphones.Successful exploitation of this vulnerability may cause the kernel to break down.CVE-2021-399747.5There is an Out-of-bounds read in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.CVE-2021-399757.5Hilinksvc has a Data Processing Errors vulnerability.Successful exploitation of this vulnerability may cause denial of service attacks.CVE-2021-399767.8There is a privilege escalation vulnerability in CloudEngine 5800 V200R020C00SPC600. Due to lack of privilege restrictions, an authenticatedCVE-2021-399777.5The HwNearbyMain module has a NULL Pointer Dereference vulnerability.Successful exploitation of this vulnerability may cause a process to reCVE-2021-399787.5Telephony application has a SQL Injection vulnerability.Successful exploitation of this vulnerability may cause privacy and security issues.CVE-2021-399799.8HHEE system has a Code Injection vulnerability.Successful exploitation of this vulnerability may affect HHEE system integrity.CVE-2021-39987.5A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage andCVE-2021-399805.3Telephony application has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnera
CVE-2021-3997: Medium severity, CVSS 5.5 | Vulnix