CVE-2021-3800 - Vulnerability Details - OpenCVE

A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00048.

Key SSVC decision points have not yet been added.

Vendors	Products
Debian	Debian Linux
Gnome	Glib
Netapp	Active Iq Unified Manager
Redhat	Enterprise Linux

Configuration 1 [-]

OR	cpe:2.3:a:gnome:glib::::::::
	cpe:2.3:a:gnome:glib::::::::

Configuration 2 [-]

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Configuration 3 [-]

cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*

Package	CPE	Advisory	Released Date
Red Hat Enterprise Linux 8
glib2-0:2.56.4-156.el8	cpe:/o:redhat:enterprise_linux:8	RHSA-2021:4385	2021-11-09T00:00:00Z

No data.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://access.redhat.com/security/cve/CVE-2021-3800
https://bugzilla.redhat.com/show_bug.cgi?id=1938284
https://gitlab.gnome.org/GNOME/glib/-/commit/3529bb4450a51995
https://lists.debian.org/debian-lts-announce/2022/09/msg00020.html
https://nvd.nist.gov/vuln/detail/CVE-2021-3800
https://security.netapp.com/advisory/ntap-20221028-0004/
https://www.cve.org/CVERecord?id=CVE-2021-3800
https://www.openwall.com/lists/oss-security/2017/06/23/8

History

Sun, 13 Jul 2025 13:45:00 +0000

Type	Values Removed	Values Added
Metrics	epss `{'score': 0.00048}`	epss `{'score': 0.00043}`

MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2022-08-23T00:00:00

Updated: 2024-08-03T17:09:08.749Z

Reserved: 2021-09-14T00:00:00

Link: CVE-2021-3800

Vulnrichment

No data.

NVD

Status : Modified

Published: 2022-08-23T16:15:09.980

Modified: 2024-11-21T06:22:28.277

Link: CVE-2021-3800

Redhat

Severity : Moderate

Publid Date: 2021-03-04T00:00:00Z

Links: CVE-2021-3800 - Bugzilla

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2021-3800", "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "dateUpdated": "2024-08-03T17:09:08.749Z", "dateReserved": "2021-09-14T00:00:00", "datePublished": "2022-08-23T00:00:00"}, "containers": {"cna": {"providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2022-10-28T00:00:00"}, "descriptions": [{"lang": "en", "value": "A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition."}], "affected": [{"vendor": "n/a", "product": "Glib", "versions": [{"version": "Fixed in glib2 2.63.6", "status": "affected"}]}], "references": [{"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1938284"}, {"url": "https://access.redhat.com/security/cve/CVE-2021-3800"}, {"url": "https://www.openwall.com/lists/oss-security/2017/06/23/8"}, {"url": "https://gitlab.gnome.org/GNOME/glib/-/commit/3529bb4450a51995"}, {"name": "[debian-lts-announce] 20220915 [SECURITY] [DLA 3110-1] glib2.0 security update", "tags": ["mailing-list"], "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00020.html"}, {"url": "https://security.netapp.com/advisory/ntap-20221028-0004/"}], "problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "description": "CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor", "cweId": "CWE-200"}]}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T17:09:08.749Z"}, "title": "CVE Program Container", "references": [{"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1938284", "tags": ["x_transferred"]}, {"url": "https://access.redhat.com/security/cve/CVE-2021-3800", "tags": ["x_transferred"]}, {"url": "https://www.openwall.com/lists/oss-security/2017/06/23/8", "tags": ["x_transferred"]}, {"url": "https://gitlab.gnome.org/GNOME/glib/-/commit/3529bb4450a51995", "tags": ["x_transferred"]}, {"name": "[debian-lts-announce] 20220915 [SECURITY] [DLA 3110-1] glib2.0 security update", "tags": ["mailing-list", "x_transferred"], "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00020.html"}, {"url": "https://security.netapp.com/advisory/ntap-20221028-0004/", "tags": ["x_transferred"]}]}]}}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:*", "matchCriteriaId": "E1AF4F37-77FE-4849-ACB4-64EA215BCF68", "versionEndExcluding": "2.62.5", "vulnerable": true}, {"criteria": "cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:*", "matchCriteriaId": "2583F723-4FBA-47EB-8A5B-6DB95F1071E0", "versionEndExcluding": "2.63.6", "versionStartIncluding": "2.63.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*", "matchCriteriaId": "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition."}, {"lang": "es", "value": "Se ha encontrado un fallo en glib versiones anteriores a 2.63.6. Debido a los alias de conjuntos de caracteres aleatorios, pkexec puede filtrar el contenido de los archivos propiedad de usuarios con privilegios a los que no los presentan bajo la condici\u00f3n apropiada."}], "id": "CVE-2021-3800", "lastModified": "2024-11-21T06:22:28.277", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-08-23T16:15:09.980", "references": [{"source": "secalert@redhat.com", "tags": ["Third Party Advisory"], "url": "https://access.redhat.com/security/cve/CVE-2021-3800"}, {"source": "secalert@redhat.com", "tags": ["Issue Tracking", "Patch", "Third Party Advisory"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1938284"}, {"source": "secalert@redhat.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://gitlab.gnome.org/GNOME/glib/-/commit/3529bb4450a51995"}, {"source": "secalert@redhat.com", "tags": ["Mailing List", "Third Party Advisory"], "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00020.html"}, {"source": "secalert@redhat.com", "tags": ["Third Party Advisory"], "url": "https://security.netapp.com/advisory/ntap-20221028-0004/"}, {"source": "secalert@redhat.com", "tags": ["Exploit", "Mailing List", "Patch", "Third Party Advisory"], "url": "https://www.openwall.com/lists/oss-security/2017/06/23/8"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://access.redhat.com/security/cve/CVE-2021-3800"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Patch", "Third Party Advisory"], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1938284"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "https://gitlab.gnome.org/GNOME/glib/-/commit/3529bb4450a51995"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00020.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "https://security.netapp.com/advisory/ntap-20221028-0004/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Mailing List", "Patch", "Third Party Advisory"], "url": "https://www.openwall.com/lists/oss-security/2017/06/23/8"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}], "source": "secalert@redhat.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-552"}], "source": "nvd@nist.gov", "type": "Secondary"}]}

{"affected_release": [{"advisory": "RHSA-2021:4385", "cpe": "cpe:/o:redhat:enterprise_linux:8", "package": "glib2-0:2.56.4-156.el8", "product_name": "Red Hat Enterprise Linux 8", "release_date": "2021-11-09T00:00:00Z"}], "bugzilla": {"description": "glib2: Possible privilege escalation thourgh pkexec and aliases", "id": "1938284", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1938284"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "status": "verified"}, "cwe": "CWE-200->CWE-552", "details": ["A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition."], "name": "CVE-2021-3800", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "firefox", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "glib2", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "firefox", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "glib2", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "firefox", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Will not fix", "package_name": "firefox:flatpak/firefox", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "mingw-glib2", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "firefox", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "glib2", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2021-03-04T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2021-3800\nhttps://nvd.nist.gov/vuln/detail/CVE-2021-3800"], "threat_severity": "Moderate"}