Vulnerability in GLib Affects Privileged File Access on Linux Systems
CVE-2021-3800

5.5MEDIUM

Key Information:

Vendor

Gnome
Status
Glib
Vendor
CVE Published:
23 August 2022

What is CVE-2021-3800?

A security flaw in GLib prior to version 2.63.6 allows pkexec to inadvertently leak content from files owned by privileged users to unprivileged users under specific conditions. This can lead to potential unauthorized access to sensitive information, highlighting a significant concern for system security and data integrity in Linux environments.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Glib Fixed in glib2 2.63.6

References

https://bugzilla.redhat.com/show_bug.cgi?id=1938284
https://access.redhat.com/security/cve/CVE-2021-3800
https://www.openwall.com/lists/oss-security/2017/06/23/8

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.