CVE-2021-3999

HighCVSS 7.8/10Last modified Oct 14, 2026

Description

A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to memory corruption when the size of the buffer is exactly 1. A local attacker who can control the input buffer and size passed to getcwd() in a setuid program could use this flaw to potentially execute arbitrary code and escalate their privileges on the system.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-193

Affected software

VendorProductVersions
n/aglibcFixed in glibc v2.31 and above.
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP>= V3.1.0, < V3.1.5
SiemensSIPLUS S7-1500 CPU 1518-4 PN/DP MFP>= V3.1.0, < V3.1.5

References

Timeline

Published
Aug 24, 2022
Last modified
Oct 14, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-399909.8The screen lock module has a Stack-based Buffer Overflow vulnerability.Successful exploitation of this vulnerability may affect user experieCVE-2021-399915.5There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerabilCVE-2021-399927.8There is an improper security permission configuration vulnerability on ACPU.Successful exploitation of this vulnerability may affect servicCVE-2021-399939.8There is an Integer overflow vulnerability with ACPU in smartphones. Successful exploitation of this vulnerability may cause out-of-bounds aCVE-2021-399949.8There is an arbitrary address access vulnerability with the product line test code.Successful exploitation of this vulnerability may affect CVE-2021-399956.5Some Huawei products use the OpenHpi software for hardware management. A function that parses data returned by OpenHpi contains an out-of-boCVE-2021-399969.8There is a Heap-based buffer overflow vulnerability with the NFC module in smartphones. Successful exploitation of this vulnerability may caCVE-2021-399979.8There is a vulnerability of unstrict input parameter verification in the audio assembly.Successful exploitation of this vulnerability may caCVE-2021-399987.5There is Vulnerability of APIs being concurrently called for multiple times in HwConnectivityExService a in smartphones. Successful exploitaCVE-2021-399997.5There is a buffer overflow vulnerability in eSE620X vESS V100R001C10SPC200 and V100R001C20SPC200. An attacker can exploit this vulnerabilityCVE-2021-40006.1showdoc is vulnerable to URL Redirection to Untrusted SiteCVE-2021-400008.8The Bluetooth module has an out-of-bounds write vulnerability. Successful exploitation of this vulnerability may result in malicious command