CVE-2021-3997
systemd: A flaw was found in systemd
CVE-2021-3997 is fixed in 37 products on 1 platform, first by libnss-myhostname 245.4-4ubuntu3.15, released January 9, 2022. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
5.5
medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0174
77th percentile
A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when too many nested directories are created in /tmp.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libnss-myhostname · Ubuntu 20.04 LTS (focal) | 245.4-4ubuntu3.15 | libnss-myhostname 245.4-4ubuntu3.15 | Jan 9, 2022 |
| libnss-mymachines · Ubuntu 20.04 LTS (focal) | 245.4-4ubuntu3.15 | libnss-mymachines 245.4-4ubuntu3.15 | Jan 9, 2022 |
| libnss-resolve · Ubuntu 20.04 LTS (focal) | 245.4-4ubuntu3.15 | libnss-resolve 245.4-4ubuntu3.15 | Jan 9, 2022 |
| libnss-systemd · Ubuntu 20.04 LTS (focal) | 245.4-4ubuntu3.15 | libnss-systemd 245.4-4ubuntu3.15 | Jan 9, 2022 |
| libpam-systemd · Ubuntu 20.04 LTS (focal) | 245.4-4ubuntu3.15 | libpam-systemd 245.4-4ubuntu3.15 | Jan 9, 2022 |
| libsystemd0 · Ubuntu 20.04 LTS (focal) | 245.4-4ubuntu3.15 | libsystemd0 245.4-4ubuntu3.15 | Jan 9, 2022 |
| libudev1 · Ubuntu 20.04 LTS (focal) | 245.4-4ubuntu3.15 | libudev1 245.4-4ubuntu3.15 | Jan 9, 2022 |
| systemd · Debian 12.15 (bookworm) | 250.2-1 | DEBIAN-CVE-2021-3997 | Aug 23, 2022 |
| systemd · Debian 13.5 (trixie) | 250.2-1 | DEBIAN-CVE-2021-3997 | Aug 23, 2022 |
| systemd · Debian 14 | 250.2-1 | DEBIAN-CVE-2021-3997 | Aug 23, 2022 |
| systemd · Ubuntu 20.04 LTS (focal) | 245.4-4ubuntu3.15 | systemd 245.4-4ubuntu3.15 | Jan 9, 2022 |
| systemd · amzn 2023 | 252.4-1161.amzn2023.0.1 | ALAS2023-2023-025 | Feb 17, 2023 |
| systemd-container · Ubuntu 20.04 LTS (focal) | 245.4-4ubuntu3.15 | systemd-container 245.4-4ubuntu3.15 | Jan 9, 2022 |
| systemd-container · amzn 2023 | 252.4-1161.amzn2023.0.1 | ALAS2023-2023-025 | Feb 17, 2023 |
| systemd-container-debuginfo · amzn 2023 | 252.4-1161.amzn2023.0.1 | ALAS2023-2023-025 | Feb 17, 2023 |
| systemd-coredump · Ubuntu 20.04 LTS (focal) | 245.4-4ubuntu3.15 | systemd-coredump 245.4-4ubuntu3.15 | Jan 9, 2022 |
| systemd-debuginfo · amzn 2023 | 252.4-1161.amzn2023.0.1 | ALAS2023-2023-025 | Feb 17, 2023 |
| systemd-debugsource · amzn 2023 | 252.4-1161.amzn2023.0.1 | ALAS2023-2023-025 | Feb 17, 2023 |
| systemd-devel · amzn 2023 | 252.4-1161.amzn2023.0.1 | ALAS2023-2023-025 | Feb 17, 2023 |
| systemd-journal-remote · Ubuntu 20.04 LTS (focal) | 245.4-4ubuntu3.15 | systemd-journal-remote 245.4-4ubuntu3.15 | Jan 9, 2022 |
| systemd-journal-remote · amzn 2023 | 252.4-1161.amzn2023.0.1 | ALAS2023-2023-025 | Feb 17, 2023 |
| systemd-journal-remote-debuginfo · amzn 2023 | 252.4-1161.amzn2023.0.1 | ALAS2023-2023-025 | Feb 17, 2023 |
| systemd-libs · amzn 2023 | 252.4-1161.amzn2023.0.1 | ALAS2023-2023-025 | Feb 17, 2023 |
| systemd-libs-debuginfo · amzn 2023 | 252.4-1161.amzn2023.0.1 | ALAS2023-2023-025 | Feb 17, 2023 |
| systemd-networkd · amzn 2023 | 252.4-1161.amzn2023.0.1 | ALAS2023-2023-025 | Feb 17, 2023 |
| systemd-networkd-debuginfo · amzn 2023 | 252.4-1161.amzn2023.0.1 | ALAS2023-2023-025 | Feb 17, 2023 |
| systemd-oomd-defaults · amzn 2023 | 252.4-1161.amzn2023.0.1 | ALAS2023-2023-025 | Feb 17, 2023 |
| systemd-pam · amzn 2023 | 252.4-1161.amzn2023.0.1 | ALAS2023-2023-025 | Feb 17, 2023 |
| systemd-pam-debuginfo · amzn 2023 | 252.4-1161.amzn2023.0.1 | ALAS2023-2023-025 | Feb 17, 2023 |
| systemd-resolved · amzn 2023 | 252.4-1161.amzn2023.0.1 | ALAS2023-2023-025 | Feb 17, 2023 |
| systemd-resolved-debuginfo · amzn 2023 | 252.4-1161.amzn2023.0.1 | ALAS2023-2023-025 | Feb 17, 2023 |
| systemd-rpm-macros · amzn 2023 | 252.4-1161.amzn2023.0.1 | ALAS2023-2023-025 | Feb 17, 2023 |
| systemd-standalone-sysusers · amzn 2023 | 252.4-1161.amzn2023.0.1 | ALAS2023-2023-025 | Feb 17, 2023 |
| systemd-standalone-sysusers-debuginfo · amzn 2023 | 252.4-1161.amzn2023.0.1 | ALAS2023-2023-025 | Feb 17, 2023 |
| systemd-standalone-tmpfiles · amzn 2023 | 252.4-1161.amzn2023.0.1 | ALAS2023-2023-025 | Feb 17, 2023 |
| systemd-standalone-tmpfiles-debuginfo · amzn 2023 | 252.4-1161.amzn2023.0.1 | ALAS2023-2023-025 | Feb 17, 2023 |
| systemd-sysv · Ubuntu 20.04 LTS (focal) | 245.4-4ubuntu3.15 | systemd-sysv 245.4-4ubuntu3.15 | Jan 9, 2022 |
| systemd-tests · Ubuntu 20.04 LTS (focal) | 245.4-4ubuntu3.15 | systemd-tests 245.4-4ubuntu3.15 | Jan 9, 2022 |
| systemd-tests · amzn 2023 | 252.4-1161.amzn2023.0.1 | ALAS2023-2023-025 | Feb 17, 2023 |
| systemd-tests-debuginfo · amzn 2023 | 252.4-1161.amzn2023.0.1 | ALAS2023-2023-025 | Feb 17, 2023 |
| systemd-timesyncd · Ubuntu 20.04 LTS (focal) | 245.4-4ubuntu3.15 | systemd-timesyncd 245.4-4ubuntu3.15 | Jan 9, 2022 |
| systemd-udev · amzn 2023 | 252.4-1161.amzn2023.0.1 | ALAS2023-2023-025 | Feb 17, 2023 |
| systemd-udev-debuginfo · amzn 2023 | 252.4-1161.amzn2023.0.1 | ALAS2023-2023-025 | Feb 17, 2023 |
| udev · Ubuntu 20.04 LTS (focal) | 245.4-4ubuntu3.15 | udev 245.4-4ubuntu3.15 | Jan 9, 2022 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.