Vulnerability Details CVE-2021-3997
A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when too many nested directories are created in /tmp.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 1.9%
CVSS Severity
CVSS v3 Score 5.5
References
- https://access.redhat.com/security/cve/CVE-2021-3997
- https://bugzilla.redhat.com/show_bug.cgi?id=2024639
- https://github.com/systemd/systemd/commit/5b1cf7a9be37e20133c0208005274ce4a5b5c6a1
- https://security.gentoo.org/glsa/202305-15
- https://www.openwall.com/lists/oss-security/2022/01/10/2
- https://access.redhat.com/security/cve/CVE-2021-3997
- https://bugzilla.redhat.com/show_bug.cgi?id=2024639
- https://github.com/systemd/systemd/commit/5b1cf7a9be37e20133c0208005274ce4a5b5c6a1
- https://security.gentoo.org/glsa/202305-15
- https://www.openwall.com/lists/oss-security/2022/01/10/2
Products affected by CVE-2021-3997
-
cpe:2.3:a:systemd_project:systemd:240
-
cpe:2.3:a:systemd_project:systemd:241
-
cpe:2.3:a:systemd_project:systemd:242
-
cpe:2.3:a:systemd_project:systemd:243
-
cpe:2.3:a:systemd_project:systemd:244
-
cpe:2.3:a:systemd_project:systemd:245
-
cpe:2.3:a:systemd_project:systemd:246
-
cpe:2.3:a:systemd_project:systemd:246.15
-
cpe:2.3:a:systemd_project:systemd:247
-
cpe:2.3:a:systemd_project:systemd:247.8
-
cpe:2.3:a:systemd_project:systemd:248
-
cpe:2.3:a:systemd_project:systemd:248.1
-
cpe:2.3:a:systemd_project:systemd:248.10
-
cpe:2.3:a:systemd_project:systemd:248.2
-
cpe:2.3:a:systemd_project:systemd:248.3
-
cpe:2.3:a:systemd_project:systemd:248.4
-
cpe:2.3:a:systemd_project:systemd:248.5
-
cpe:2.3:a:systemd_project:systemd:248.6
-
cpe:2.3:a:systemd_project:systemd:248.7
-
cpe:2.3:a:systemd_project:systemd:248.8
-
cpe:2.3:a:systemd_project:systemd:248.9
-
cpe:2.3:a:systemd_project:systemd:249
-
cpe:2.3:a:systemd_project:systemd:249.1
-
cpe:2.3:a:systemd_project:systemd:249.10
-
cpe:2.3:a:systemd_project:systemd:249.11
-
cpe:2.3:a:systemd_project:systemd:249.12
-
cpe:2.3:a:systemd_project:systemd:249.2
-
cpe:2.3:a:systemd_project:systemd:249.3
-
cpe:2.3:a:systemd_project:systemd:249.4
-
cpe:2.3:a:systemd_project:systemd:249.5
-
cpe:2.3:a:systemd_project:systemd:249.6
-
cpe:2.3:a:systemd_project:systemd:249.7
-
cpe:2.3:a:systemd_project:systemd:249.8
-
cpe:2.3:a:systemd_project:systemd:249.9
-
cpe:2.3:a:systemd_project:systemd:250
-
cpe:2.3:a:systemd_project:systemd:250.1
-
cpe:2.3:o:fedoraproject:fedora:34
-
cpe:2.3:o:fedoraproject:fedora:35
-
cpe:2.3:o:redhat:enterprise_linux:7.0
-
cpe:2.3:o:redhat:enterprise_linux:8.0
-
cpe:2.3:o:redhat:enterprise_linux:9.0