Logo
›
›vulnerability›CVE-2021-43618
Name
CVE-2021-43618
Source
NVD ( link)Debian ( link)
Description
GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.
CWEs
CWE-190
Published Date
Updated Date
Workaround
-
Advisories
http://seclists.org/fulldisclosure/2022/Oct/8Mailing List
http://www.openwall.com/lists/oss-security/2022/10/13/3Mailing List
https://bugs.debian.org/994405Mailing List
https://gmplib.org/list-archives/gmp-bugs/2021-September/005077.htmlExploit
https://gmplib.org/repo/gmp-6.2/rev/561a9c25298ePatch
https://lists.debian.org/debian-lts-announce/2021/12/msg00001.htmlMailing List
https://security.netapp.com/advisory/ntap-20221111-0001/Third Party Advisory
http://seclists.org/fulldisclosure/2022/Oct/8Mailing List
http://www.openwall.com/lists/oss-security/2022/10/13/3Mailing List
https://bugs.debian.org/994405Mailing List
https://gmplib.org/list-archives/gmp-bugs/2021-September/005077.htmlExploit
https://gmplib.org/repo/gmp-6.2/rev/561a9c25298ePatch
https://lists.debian.org/debian-lts-announce/2021/12/msg00001.htmlMailing List
https://security.netapp.com/advisory/ntap-20221111-0001/Third Party Advisory

Analysis#

Affected Component
Analysis
gmp
Patched

Vulnerability Ratings#

7.5
CVSSv31
5
CVSSv2

Others affected components#

Name
Project
Project Version
Version
Status
gmp
buildroot
2025.02.x
6.3.0
Not Affected
gmp
buildroot
master
6.3.0
Not Affected
gmp
openwrt
master
6.3.0-r2
Not Affected
gmp
openwrt
openwrt-25.12
6.3.0-r2
Not Affected
gmp
yocto
master
6.3.0
Not Affected
gmp
yocto
scarthgap
6.3.0
Not Affected

Resolved with patches#

gmp (yocto:kirkstone)

#
Title
Author
Resolve
1
Patch #1
Ross Burton <ross.burton@arm.com>
CVE-2021-43618