Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2021-3570

Опубликовано: 09 июл. 2021
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 8
CVSS3: 8.8

Описание

A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote attacker to cause an information leak, crash, or potentially remote code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. This flaw affects linuxptp versions before 3.1.1, before 2.0.1, before 1.9.3, before 1.8.1, before 1.7.1, before 1.6.1 and before 1.5.1.

РелизСтатусПримечание
bionic

released

1.8-1ubuntu0.1
devel

not-affected

3.1-2.1
esm-apps/bionic

released

1.8-1ubuntu0.1
esm-apps/focal

released

1.9.2-1ubuntu0.1
esm-apps/jammy

not-affected

3.1-2.1
esm-apps/xenial

released

1.6-1ubuntu0.1~esm1
esm-infra-legacy/trusty

DNE

focal

released

1.9.2-1ubuntu0.1
groovy

ignored

end of life
hirsute

ignored

end of life

Показывать по

EPSS

Процентиль: 78%
0.01229
Низкий

8 High

CVSS2

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 8.8
redhat
почти 4 года назад

A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote attacker to cause an information leak, crash, or potentially remote code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. This flaw affects linuxptp versions before 3.1.1, before 2.0.1, before 1.9.3, before 1.8.1, before 1.7.1, before 1.6.1 and before 1.5.1.

CVSS3: 8.8
nvd
почти 4 года назад

A flaw was found in the ptp4l program of the linuxptp package. A missing length check when forwarding a PTP message between ports allows a remote attacker to cause an information leak, crash, or potentially remote code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. This flaw affects linuxptp versions before 3.1.1, before 2.0.1, before 1.9.3, before 1.8.1, before 1.7.1, before 1.6.1 and before 1.5.1.

CVSS3: 8.8
debian
почти 4 года назад

A flaw was found in the ptp4l program of the linuxptp package. A missi ...

suse-cvrf
больше 3 лет назад

Security update for linuxptp

suse-cvrf
почти 4 года назад

Security update for linuxptp

EPSS

Процентиль: 78%
0.01229
Низкий

8 High

CVSS2

8.8 High

CVSS3