CVE-2021-3998

A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data.

CVSS 3.1

7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-25)

CWEs

CWE-125, CWE-252

Published

2022-08-24

Modified

2026-10-14

Record from

the NVD, synced 2026-10-19

Affected

• gnu:glibc
• netapp:h300s_firmware
• netapp:h410c_firmware
• netapp:h410s_firmware
• netapp:h500s_firmware
• netapp:h700s_firmware
• netapp:ontap_select_deploy_administration_utility

References

• https://access.redhat.com/security/cve/CVE-2021-3998
• https://bugzilla.redhat.com/show_bug.cgi?id=2024633
• https://security-tracker.debian.org/tracker/CVE-2021-3998
• https://security.netapp.com/advisory/ntap-20221020-0003/
• https://sourceware.org/bugzilla/show_bug.cgi?id=28770

Check your stackJSON