Moderate: gmp security update
Summary
ALSA-2024:3214: Moderate: gmp security update. Affects gmp versions < 1:6.1.2-11.el8. Fixed in 1:6.1.2-11.el8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The gmp packages contain GNU MP, a library for arbitrary precision arithmetics, signed integers operations, rational numbers, and floating point numbers.
Vulnerability Detail
The gmp package is affected by an integer overflow and resultant buffer overflow vulnerability (CVE-2021-43618). This vulnerability can be exploited by an attacker using crafted input to cause a buffer overflow, potentially leading to arbitrary code execution or a denial of service.
How To Fix
Minimum fixed version
1:6.1.2-11.el8
This is the first release that contains the fix.
sudo dnf update gmpTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability at this time.
Conclusion
It is recommended to update the gmp package to the latest version to mitigate the risk of this vulnerability. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for gmp →
FAQ
This vulnerability could allow an attacker to execute arbitrary code or cause a denial of service on systems using the affected gmp package.
There are no known public exploits for this vulnerability at this time.
No, only versions prior to 1:6.1.2-11.el8 are affected by this vulnerability.
No, a system restart is not required after updating the gmp package.
You can find more information about this vulnerability in the CVE page listed in the References section of the advisory.
Related vulnerabilities
Recent vulnerabilities recorded for gmp.
