CVE-2021-3996
MediumAdvisory
Published 1 Feb 2022In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.5
- base score, highest
- EPSS
- 0.006
- 48th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 250
- of 17,781 indexed, latest versions
- Container images
- 193
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 250 of 17,781 indexed charts deploy, on 193 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| util-linuxdeb | 2.34-0.1ubuntu9, 2.34-0.1ubuntu9.1 | 2.34-0.1ubuntu9.3 | 105 |
| util-linuxapk | 2.35.2-r0, 2.36.1-r0, 2.36.1-r1, 2.37-r0+2 more | 2.37.3-r0 | 88 |
- OSV records
- ALPINE-CVE-2021-3996UBUNTU-CVE-2021-3996
- Also known as
- USN-5279-1
Charts affected
250 by stars
Container images carrying it
193 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| yandex/ | 1cbf75aabe1e | util-linux | 2.34-0.1ubuntu9.3 | 1 |
| yandex/ | 4eccfffb01d7 | util-linux | 2.34-0.1ubuntu9.3 | 1 |
| yuzutech/ | 7c1917c66d96 | util-linux | 2.37.3-r0 | 1 |
| yuzutech/ | bd629239a64e | util-linux | 2.37.3-r0 | 1 |
| yuzutech/ | 15c9eef47a62 | util-linux | 2.37.3-r0 | 1 |
| yuzutech/ | 7acc8fe7caba | util-linux | 2.37.3-r0 | 1 |
| zabbix/ | 2127168cab03 | util-linux | 2.34-0.1ubuntu9.3 | 1 |
| zabbix/ | 6c946b1f45cd | util-linux | 2.34-0.1ubuntu9.3 | 1 |
| zabbix/ | 01de79c31391 | util-linux | 2.34-0.1ubuntu9.3 | 1 |
| gcr.io/ | 135327c978de | util-linux | 2.37.3-r0 | 1 |
| gcr.io/ | c552478f8f11 | util-linux | 2.34-0.1ubuntu9.3 | 1 |
| gcr.io/ | 9538fabe49fd | util-linux | 2.34-0.1ubuntu9.3 | 1 |
| ghcr.io/ | 3191b771a6f2 | util-linux | 2.37.3-r0 | 1 |
| ghcr.io/ | 22de6314c31e | util-linux | 2.37.3-r0 | 1 |
| ghcr.io/ | 6047599cd78e | util-linux | 2.34-0.1ubuntu9.3 | 1 |
| ghcr.io/ | fdb5501cdfb9 | util-linux | 2.34-0.1ubuntu9.3 | 1 |
| ghcr.io/ | 5c6b8f91f1c4 | util-linux | 2.34-0.1ubuntu9.3 | 1 |
| ghcr.io/ | 827aa2f2389d | util-linux | 2.34-0.1ubuntu9.3 | 1 |
| ghcr.io/ | 54ebc1f90963 | util-linux | 2.34-0.1ubuntu9.3 | 1 |
| ghcr.io/ | cbd5d4cc1245 | util-linux | 2.34-0.1ubuntu9.3 | 1 |
| ghcr.io/ | ef3670f7e0a8 | util-linux | 2.34-0.1ubuntu9.3 | 1 |
| ghcr.io/ | ad943e9309e4 | util-linux | 2.34-0.1ubuntu9.3 | 1 |
| ghcr.io/ | c2d6e775db5a | util-linux | 2.34-0.1ubuntu9.3 | 1 |
| ghcr.io/ | 4ea617c30397 | util-linux | 2.34-0.1ubuntu9.3 | 1 |
| ghcr.io/ | 448045c4270b | util-linux | 2.34-0.1ubuntu9.3 | 1 |
| ghcr.io/ | e28e0e7de11b | util-linux | 2.34-0.1ubuntu9.3 | 1 |
| ghcr.io/ | 01563adc95fd | util-linux | 2.34-0.1ubuntu9.3 | 1 |
| ghcr.io/ | 2b92df1143b9 | util-linux | 2.34-0.1ubuntu9.3 | 1 |
| ghcr.io/ | 600221f0f43f | util-linux | 2.34-0.1ubuntu9.3 | 1 |
| ghcr.io/ | a85e03d8bc1d | util-linux | 2.34-0.1ubuntu9.3 | 1 |
| ghcr.io/ | 9e36964bce26 | util-linux | 2.37.3-r0 | 1 |
| ghcr.io/ | 821fd6a6f2cd | util-linux | 2.37.3-r0 | 1 |
| public.ecr.aws/ | 442cc3b32935 | util-linux | 2.37.3-r0 | 1 |
| public.ecr.aws/ | 573779e57fae | util-linux | 2.34-0.1ubuntu9.3 | 1 |
| quay.io/ | 5d25d47d6e17 | util-linux | 2.37.3-r0 | 1 |
| quay.io/ | a88add0f8c93 | util-linux | 2.37.3-r0 | 1 |
| quay.io/ | 36ea8f34aa6b | util-linux | 2.37.3-r0 | 1 |
| quay.io/ | 18feb3906286 | util-linux | 2.37.3-r0 | 1 |
| quay.io/ | a25886092fa4 | util-linux | 2.37.3-r0 | 1 |
| quay.io/ | 3207f957e80c | util-linux | 2.37.3-r0 | 1 |
| quay.io/ | 4b188259267e | util-linux | 2.37.3-r0 | 1 |
| quay.io/ | cad83090c58f | util-linux | 2.37.3-r0 | 1 |
| registry.gitlab.com/ | f6385712935f | util-linux | 2.34-0.1ubuntu9.3 | 1 |