Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2021-43618: A flaw was found in gmp. An integer overflow vulnerability could allow an attacker to input an integer value leading to a crash. The highest threat from this vulnerability is to system availability.
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | gmp | 1:6.2.1-2.amzn2023.0.2 |
| Amazon Linux · 2023 | gmp-c++ | 1:6.2.1-2.amzn2023.0.2 |
| Amazon Linux · 2023 | gmp-c++-debuginfo | 1:6.2.1-2.amzn2023.0.2 |
| Amazon Linux · 2023 | gmp-debuginfo | 1:6.2.1-2.amzn2023.0.2 |
| Amazon Linux · 2023 | gmp-debugsource | 1:6.2.1-2.amzn2023.0.2 |
| Amazon Linux · 2023 | gmp-devel | 1:6.2.1-2.amzn2023.0.2 |
| Amazon Linux · 2023 | gmp-static | 1:6.2.1-2.amzn2023.0.2 |
Vulnerabilities 1
-
Unscored —
GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffe…
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2021-43618.html