CVE-2021-3997: Medium severity Systemd Project Systemd vulnerability
A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when too many nested directories are created in /tmp.
Other sources
A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to denial of service at boot time.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-3997?
CVE-2021-3997 is a vulnerability found in systemd that can lead to a denial of service at boot time when too many nested directories are created in /tmp.
What software is affected by CVE-2021-3997?
Systemd versions up to 250.2, Fedora 34 and 35, Red Hat Enterprise Linux 7.0, 8.0, and 9.0 are affected by CVE-2021-3997.
What is the severity of CVE-2021-3997?
The severity of CVE-2021-3997 is medium with a CVSS score of 5.5.
How can I fix CVE-2021-3997?
To fix CVE-2021-3997, you should update your systemd software to version 250.2 or later.
Where can I find more information about CVE-2021-3997?
More information about CVE-2021-3997 can be found at the following references: [link1](https://access.redhat.com/security/cve/CVE-2021-3997), [link2](https://bugzilla.redhat.com/show_bug.cgi?id=2024639), [link3](https://github.com/systemd/systemd/commit/5b1cf7a9be37e20133c0208005274ce4a5b5c6a1).