Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-43618: A flaw was found in gmp. An integer overflow vulnerability could allow an attacker to input an integer value leading to a crash. The highest threat from this vulnerability is to system availability.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | gmp | 1:6.0.0-15.amzn2.0.3 |
| Amazon Linux · 2 | gmp-debuginfo | 1:6.0.0-15.amzn2.0.3 |
| Amazon Linux · 2 | gmp-devel | 1:6.0.0-15.amzn2.0.3 |
| Amazon Linux · 2 | gmp-static | 1:6.0.0-15.amzn2.0.3 |
Vulnerabilities 1
-
Unscored —
GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffe…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-43618.html