Skip to content
OpenAdvisories
Medium ALAS2-2021-1705 1 CVE

Moderate: linuxptp security update (Amazon Linux 2)

Published Sep 8, 2021 · Updated Sep 15, 2021

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-3571: A flaw was found in the ptp4l program of the linuxptp package. When ptp4l is operating on a little-endian architecture as a PTP transparent clock, a remote attacker could send a crafted one-step sync message to cause an information leak or crash. The highest threat from this vulnerability is to data confidentiality and system availability. 1966241: CVE-2021-3571 linuxptp: wrong length of one-step follow-up in transparent clock

Fixed packages 2

ReleasePackageFixed in
Amazon Linux · 2 linuxptp 0:2.0-2.amzn2.1.2
Amazon Linux · 2 linuxptp-debuginfo 0:2.0-2.amzn2.1.2

Vulnerabilities 1

  • Unscored —

    A flaw was found in the ptp4l program of the linuxptp package. When ptp4l is operating on a little-endian architecture …

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-3571.html