Vulnerability · Published Nov 15, 2021 · Assigned by mitre
CVE-2021-43618
High 7.5
In plain English
A high-severity security flaw in the gmp package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 4.5% (higher than 91% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)7.5High
Exploit odds (30 days)4.5%top 8.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | gmp | 1:6.1.2-11.el8 | ALSA-2024:3214 |
| AlmaLinux:9 | gmp | 1:6.2.0-13.el9 | ALSA-2023:6661 |
| AlmaLinux:8 | gmp-c++ | 1:6.1.2-11.el8 | ALSA-2024:3214 |
| AlmaLinux:9 | gmp-c++ | 1:6.2.0-13.el9 | ALSA-2023:6661 |
| AlmaLinux:8 | gmp-devel | 1:6.1.2-11.el8 | ALSA-2024:3214 |
| AlmaLinux:9 | gmp-devel | 1:6.2.0-13.el9 | ALSA-2023:6661 |
| Alpine:v3.20 | gmp | 6.2.1-r1 | ALPINE-CVE-2021-43618 |
| Alpine:v3.21 | gmp | 6.2.1-r1 | ALPINE-CVE-2021-43618 |
| Alpine:v3.22 | gmp | 6.2.1-r1 | ALPINE-CVE-2021-43618 |
| Alpine:v3.23 | gmp | 6.2.1-r1 | ALPINE-CVE-2021-43618 |
| Alpine:v3.24 | gmp | 6.2.1-r1 | ALPINE-CVE-2021-43618 |
| Debian:12 | gmp | 2:6.2.1+dfsg-3 | DEBIAN-CVE-2021-43618 |
| Debian:13 | gmp | 2:6.2.1+dfsg-3 | DEBIAN-CVE-2021-43618 |
| Debian:14 | gmp | 2:6.2.1+dfsg-3 | DEBIAN-CVE-2021-43618 |
| Rocky Linux:9 | gmp | 1:6.2.0-13.el9 | RLSA-2023:6661 |
Affected products (as reported)
References
- https://gmplib.org/list-archives/gmp-bugs/2021-September/005077.html
- https://bugs.debian.org/994405
- https://gmplib.org/repo/gmp-6.2/rev/561a9c25298e
- [debian-lts-announce] 20211202 [SECURITY] [DLA 2837-1] gmp security update mailing-list
- [oss-security] 20221013 Re: sagemath denial of service with abort() in gmp: overflow in mpz type mailing-list
- 20221016 Re: over 2000 packages depend on abort()ing libgmp mailing-list
- https://security.netapp.com/advisory/ntap-20221111-0001/
- GLSA-202309-13 vendor-advisory
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html