vulnerability

Amazon Linux AMI 2: CVE-2021-43618: Security patch for gmp (ALAS-2023-2369)

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:P)
Published
Nov 15, 2021
Added
Dec 5, 2023
Modified
Dec 5, 2023

Description

GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.

Solutions

amazon-linux-ami-2-upgrade-gmpamazon-linux-ami-2-upgrade-gmp-debuginfoamazon-linux-ami-2-upgrade-gmp-develamazon-linux-ami-2-upgrade-gmp-static
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.