CVE-2021-3800: Infoleak
Published Mar 12, 2021
·Updated
A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition.
Affected Software
5 affected componentsFixes available
redhat/glib2<2.63.6
2.63.6
Gnome GLib<2.62.5
Gnome GLib>=2.63.0<2.63.6
Debian Debian Linux=10.0
NetApp Active Iq Unified Manager Vmware Vsphere
Remediation
Patch Available
Patch Available
Event History
Aug 23, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2021-3800?
CVE-2021-3800 is a vulnerability found in glib before version 2.63.6 that allows pkexec to leak content from files owned by privileged users to unprivileged ones.
2
What is the severity of CVE-2021-3800?
The severity of CVE-2021-3800 is medium with a CVSS score of 5.5.
3
How does CVE-2021-3800 affect GNOME GLib?
CVE-2021-3800 affects GNOME GLib versions up to 2.62.5 and versions between 2.63.0 and 2.63.6.
4
How does CVE-2021-3800 affect Debian Debian Linux?
CVE-2021-3800 affects Debian Debian Linux 10.0.
5
How do I fix CVE-2021-3800?
To fix CVE-2021-3800, update to version 2.63.6 or later of glib.