Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2021-3570

Опубликовано: 09 июл. 2021
Источник: ubuntu
Приоритет: medium
CVSS2: 8
CVSS3: 8.8

Описание

A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote attacker to cause an information leak, crash, or potentially remote code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. This flaw affects linuxptp versions before 3.1.1, before 2.0.1, before 1.9.3, before 1.8.1, before 1.7.1, before 1.6.1 and before 1.5.1.

РелизСтатусПримечание
bionic

released

1.8-1ubuntu0.1
devel

not-affected

3.1-2.1
esm-apps/bionic

released

1.8-1ubuntu0.1
esm-apps/focal

released

1.9.2-1ubuntu0.1
esm-apps/jammy

not-affected

3.1-2.1
esm-apps/xenial

released

1.6-1ubuntu0.1~esm1
esm-infra-legacy/trusty

DNE

focal

released

1.9.2-1ubuntu0.1
groovy

ignored

end of life
hirsute

ignored

end of life

Показывать по

8 High

CVSS2

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 8.8
redhat
больше 4 лет назад

A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote attacker to cause an information leak, crash, or potentially remote code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. This flaw affects linuxptp versions before 3.1.1, before 2.0.1, before 1.9.3, before 1.8.1, before 1.7.1, before 1.6.1 and before 1.5.1.

CVSS3: 8.8
nvd
больше 4 лет назад

A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote attacker to cause an information leak, crash, or potentially remote code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. This flaw affects linuxptp versions before 3.1.1, before 2.0.1, before 1.9.3, before 1.8.1, before 1.7.1, before 1.6.1 and before 1.5.1.

CVSS3: 8.8
debian
больше 4 лет назад

A flaw was found in the ptp4l program of the linuxptp package. A missi ...

suse-cvrf
около 4 лет назад

Security update for linuxptp

suse-cvrf
около 4 лет назад

Security update for linuxptp

8 High

CVSS2

8.8 High

CVSS3