Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-3571: A flaw was found in the ptp4l program of the linuxptp package. When ptp4l is operating on a little-endian architecture as a PTP transparent clock, a remote attacker could send a crafted one-step sync message to cause an information leak or crash. The highest threat from this vulnerability is to data confidentiality and system availability. 1966241: CVE-2021-3571 linuxptp: wrong length of one-step follow-up in transparent clock
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | linuxptp | 0:2.0-2.amzn2.1.2 |
| Amazon Linux · 2 | linuxptp-debuginfo | 0:2.0-2.amzn2.1.2 |
Vulnerabilities 1
-
Unscored —
A flaw was found in the ptp4l program of the linuxptp package. When ptp4l is operating on a little-endian architecture …
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-3571.html