CVE-2021-3800

Public on 2022-08-23

Modified on 2024-02-12

Description

A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition.

Severity

Medium

See what this means

CVSS v3 Base Score

4.7

See breakdown

Affected Packages

Platform	Package	Release Date	Advisory
Amazon Linux 1	glib2	2023-05-03	ALAS-2023-1742
Amazon Linux 2 - Core	glib2	2023-05-31	ALAS2-2023-2058

CVSS Scores

	Score Type	Score	Vector
Amazon Linux	CVSSv3	4.7	CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
NVD	CVSSv3	5.5	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

References

FAQs regarding Amazon Linux ALAS/CVE Severity Red Hat: CVE-2021-3800 Mitre: CVE-2021-3800