CVE-2021-3998: GNU Glibc

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data.

Affected products

• GNU Glibc: from 2.33, before 2.35 (fixed in 2.35)
• Netapp h300s Firmware: affected versions not specified
• Netapp h410c Firmware: affected versions not specified
• Netapp h410s Firmware: affected versions not specified
• Netapp h500s Firmware: affected versions not specified
• Netapp h700s Firmware: affected versions not specified
• Netapp Ontap Select Deploy Administration Utility: affected versions not specified

Published 2022-08-24. Last modified 2026-06-17.