ZeroDay Findings
Sign inSign up

Findings

CVE-2021-3998

A flaw was found in glibc.

Published Aug 24, 2022 · updated Oct 14, 2026 · gnu glibc

A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Aug 24, 2022 · NIST NVD

    Detected

    A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data.

  2. Oct 14, 2026 · NIST NVD

    Updated

    A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data.

Affected

  • cpe gnu/glibcversion unspecified
  • cpe netapp/h300s firmwareversion unspecified
  • cpe netapp/h410c firmwareversion unspecified
  • cpe netapp/h410s firmwareversion unspecified
  • cpe netapp/h500s firmwareversion unspecified
  • cpe netapp/h700s firmwareversion unspecified
  • cpe netapp/ontap select deploy administration utilityversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2021-3998

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2021-3998

    30-day exploitation probability 2.1%

    first.org
  • NIST NVDVulnerability recordCVE-2021-3998

    A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data.

    nvd.nist.gov

References

CVE-2021-3998 · ZeroDay Findings