CVE Vulnerabilities

CVE-2021-3997

Uncontrolled Recursion

Published: Aug 23, 2022 | Modified: May 03, 2023
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
5.5 MODERATE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Ubuntu
MEDIUM

A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when too many nested directories are created in /tmp.

Weakness

The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.

Affected Software

Name Vendor Start Version End Version
Systemd Systemd_project 240 (including) 250.2 (excluding)
Systemd Ubuntu bionic *
Systemd Ubuntu devel *
Systemd Ubuntu esm-infra-legacy/trusty *
Systemd Ubuntu esm-infra/bionic *
Systemd Ubuntu esm-infra/xenial *
Systemd Ubuntu focal *
Systemd Ubuntu hirsute *
Systemd Ubuntu impish *
Systemd Ubuntu trusty/esm *

Potential Mitigations

References