CVE-2021-3800: Debian Linux

Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days.

A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition.

Affected products

• Debian Debian Linux: version 10.0 only
• Gnome Glib: before 2.62.5 (fixed in 2.62.5); from 2.63.0, before 2.63.6 (fixed in 2.63.6)
• Netapp Active Iq Unified Manager: affected versions not specified

Published 2022-08-23. Last modified 2026-06-17.