CVE-2021-3800

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-3800
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-3800.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-3800
Downstream
Related
Published
2022-08-23T16:15:09.980Z
Modified
2026-03-10T23:42:41.031083Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

A flaw was found in glib before version 2.63.6. Due to random charset alias, pkexec can leak content from files owned by privileged users to unprivileged ones under the right condition.

References

Affected packages

Git / github.com/gnome/glib

Affected ranges

Type
GIT
Repo
https://github.com/gnome/glib
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
86c2832f950c389e230ec09c8bf0b92b475f0ee3
Introduced
66da7beb65dac8c15bc70d5b2635299760bc51af
Fixed
b90eb15f3e718d90437ddd3a51fd22b20788d0b2
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2.62.5"
        },
        {
            "introduced": "2.63.0"
        },
        {
            "fixed": "2.63.6"
        }
    ]
}
Type
Repo
https://gitlab.gnome.org/GNOME/glib
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3529bb4450a51995

Affected versions

2.*
2.63.0
2.63.1
2.63.2
2.63.3
2.63.4
2.63.5

Database specific

unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "10.0"
            }
        ]
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-3800.json"